xn--gk-fka.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:57:fd:f3:40:1f:08:d1:1b:aa:a2:18:e4:4f:54:7f:2a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xn--gk-fka.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:57:fd:f3:40:1f:08:d1:1b:aa:a2:18:e4:4f:54:7f:2a
Serial Number (int): 330190857333754547334270820305011133939498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:82:32:70:bc:2c:e0:bf:20:0d:56:6d:cf:d6:fc:bf:9b:1a:21:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:18:00:6a:08:c3:c1:bc:ee:ff:8d:32:a6:28:4f:24:29:d1:69:a8
Fingerprint (sha256): 4a:a0:22:9b:b7:83:cb:28:72:d4:c4:ec:8f:e4:53:2e:b4:9a:2f:c9:2c:61:fd:43:b5:65:8b:86:07:bf:79:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate xn--gk-fka.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--gk-fka.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bargigia.com
cmg1.com
culturalombarda.com
cureforaddiction.org
dayola.com
drugabuseprogram.org
drugrelapse.org
facesanonymous.org
hp15.com
lanticataverna.com
matruska.com
mindrehab.com
oceantantra.com
onlinefinancing.org
p724.com
putative.org
sizaa.com
testepikdomain1.com
tiendaencasa.com
www.bargigia.com
www.cmg1.com
www.culturalombarda.com
www.cureforaddiction.org
www.dayola.com
www.drugabuseprogram.org
www.drugrelapse.org
www.facesanonymous.org
www.hp15.com
www.lanticataverna.com
www.matruska.com
www.mindrehab.com
www.oceantantra.com
www.onlinefinancing.org
www.p724.com
www.putative.org
www.sizaa.com
www.testepikdomain1.com
www.tiendaencasa.com
www.xn--anakkale-r0a.com
www.xn--bur-4la.com
www.xn--by-xkab.com
www.xn--ebnem-idb.com
www.xn--eek-sza.com
www.xn--gk-fka.com
www.xn--glck-5qa2b.com
www.xn--gncel-kva.com
www.xn--gnl-sna5a.com
www.xn--ili-rzab.com
www.xn--ilingir-txa.com
www.xn--ka-5ia.com
www.xn--kre-hoa.com
www.xn--ktahya-3ya.com
www.xn--lleburgaz-q9a.com
www.xn--mraniye-m2a.com
www.xn--mtercim-n2a.com
www.xn--mu-gta.com
www.xn--mzikal-3ya.com
www.xn--n-dha.com
www.xn--nee-tza.com
www.xn--ok-3ia.com
www.xn--orba-zoa.com
www.xn--orlu-zoa.com
www.xn--orum-zoa.com
www.xn--paa-tza.com
www.xn--popmzik-q2a.com
www.xn--uurtma-wua.com
www.xn--virs-2ra.com
www.xn--zm-wkab.com
www.zamorra.com
xn--anakkale-r0a.com
xn--bur-4la.com
xn--by-xkab.com
xn--ebnem-idb.com
xn--eek-sza.com
xn--gk-fka.com
xn--glck-5qa2b.com
xn--gncel-kva.com
xn--gnl-sna5a.com
xn--ili-rzab.com
xn--ilingir-txa.com
xn--ka-5ia.com
xn--kre-hoa.com
xn--ktahya-3ya.com
xn--lleburgaz-q9a.com
xn--mraniye-m2a.com
xn--mtercim-n2a.com
xn--mu-gta.com
xn--mzikal-3ya.com
xn--n-dha.com
xn--nee-tza.com
xn--ok-3ia.com
xn--orba-zoa.com
xn--orlu-zoa.com
xn--orum-zoa.com
xn--paa-tza.com
xn--popmzik-q2a.com
xn--uurtma-wua.com
xn--virs-2ra.com
xn--zm-wkab.com
zamorra.com

Other certificates including the domain name xn--gk-fka.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for xn--gk-fka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Vifas7yPxHBBGZ2YpE
ERO0VNl/7iKRuQfkEtBMTFO90YDoopa8IRDlsBH9O/CqkY53zunXYX8nVvwM2CgE
htGATyqdElo9ga4jvc66ab+zXdSVneMo+esdo8apQZlxm6wUMW7NXg/O5e4jp1tv
3YRCDNWLTASCY8CPLQM41tzuiz0gehVpLX+yvoT9E9CxhyLzPalVUkzMwAyFCFEj
2PvJ9JHCtpraIszA9xPKOCntV5s3JNNAeZ8SG7oYgcMWllX+h00XBsZMtMay9++m
D/CeErigJzaZxIgsrbOSNXb6oNmlwMPFqyBIhXmunwfRRi3NB/W0gx7kmLHn336P
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330190857333754547334270820305011133939498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 08:27:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 08:27:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--gk-fka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24224630074717327385504705345028715414026554319514181209290067276563837607812308288817860509139724399714309309013602029781470671585939902138372710656813656742414367029293401489778716168773599831828415376531075704103279575138646926843672923578183276143209306453834916656908578988452172595377433257081003923192003386844079648961970098421636405846565771588865806833744056623704932355601227334135385992040422303639287324962450251266934069110899776015981903072032638883278039739708306120168147100020045326611759021912793430744089522580644445736883606583760714455661354265115930785885740446991770787083260424541888579538829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9823270bc2ce0bf200d566dcfd6fcbf9b1a2188
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1956 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bargigia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmg1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturalombarda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cureforaddiction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugabuseprogram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugrelapse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facesanonymous.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hp15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanticataverna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matruska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindrehab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceantantra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinefinancing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p724.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sizaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testepikdomain1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiendaencasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bargigia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmg1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturalombarda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cureforaddiction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dayola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drugabuseprogram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drugrelapse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facesanonymous.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hp15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanticataverna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matruska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindrehab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceantantra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinefinancing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p724.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.putative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sizaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testepikdomain1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiendaencasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--anakkale-r0a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bur-4la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--by-xkab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ebnem-idb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--eek-sza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--gk-fka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--glck-5qa2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--gncel-kva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--gnl-sna5a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ili-rzab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ilingir-txa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ka-5ia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--kre-hoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ktahya-3ya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--lleburgaz-q9a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--mraniye-m2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--mtercim-n2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--mu-gta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--mzikal-3ya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--n-dha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--nee-tza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ok-3ia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--orba-zoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--orlu-zoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--orum-zoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--paa-tza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--popmzik-q2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--uurtma-wua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--virs-2ra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--zm-wkab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zamorra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--anakkale-r0a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bur-4la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--by-xkab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ebnem-idb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--eek-sza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gk-fka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glck-5qa2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gncel-kva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gnl-sna5a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ili-rzab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ilingir-txa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ka-5ia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kre-hoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ktahya-3ya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lleburgaz-q9a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mraniye-m2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mtercim-n2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mu-gta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mzikal-3ya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--n-dha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nee-tza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ok-3ia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--orba-zoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--orlu-zoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--orum-zoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--paa-tza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--popmzik-q2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--uurtma-wua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--virs-2ra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zm-wkab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zamorra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bfa1c2c030000040300473045022100d15e8296aeabb288968a43c03aaeb959a225e4295b1027bce1ffb79fa2c971f70220429a04f87439c95a586fbf3d276ab7ec3b4b55ebb16d6b81f2d395f5722230a000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bfa1c2c250000040300463044022036d8412d4b32212f3f834f86601d1bb117b846a463c3f8b1e311a920a6b09a5202206589986e29b039a31e14c0d00316e9461f6d4528273d63184156efd27ca81129
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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