healthallianceplan.org

Issued by R3

About this certificate

This digital certificate with serial number 04:e8:9c:10:40:96:6e:4a:0d:5b:3f:ad:0e:e5:c4:a0:ba:60 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=healthallianceplan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:9c:10:40:96:6e:4a:0d:5b:3f:ad:0e:e5:c4:a0:ba:60
Serial Number (int): 427602096806783465428925120863408530438752
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:5f:fe:25:54:3c:81:79:52:ae:69:52:ad:fc:2d:68:d7:60:1e:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4b:80:e1:f9:89:59:f5:1b:f6:77:06:0d:03:50:e7:c1:e0:68:70:67
Fingerprint (sha256): 4b:f9:be:94:c1:cf:fc:0f:fa:40:da:02:1f:89:cb:48:8a:67:4e:95:34:7e:4f:76:7b:d0:3c:04:a9:d5:93:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate healthallianceplan.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthallianceplan.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.achblueten.de
*.americannitional.com
*.anzeichen-von-depressionen.de
*.assyrianaustraliansocialdevelopmentclub.org
*.astrokeabove.com
*.bisexualdating.vip
*.bitcoincartera.com
*.blasenntzuendung.de
*.bundesarztkammer.de
*.casles.cc
*.cinemavoir.co
*.dharris.com
*.embracevelocity.cn
*.eurofins.me
*.fundaciondarchile.org
*.gardenersaadvice.info
*.goststream.site
*.healthallianceplan.org
*.huayraquimbal.org
*.ikkouan.com
*.itutor.online
*.junita.com
*.koerperfunktionen.de
*.krankengmnastik.de
*.lds.tools
*.marlald1.top
*.mtwer.org
*.mutiple-sklerose.de
*.nuestracultura.com
*.orientierungsfaehigkeit.de
*.podologiea.de
*.pulsa-aqui-para-ver.info
*.rugworld.org
*.seakingarrangments.com
*.sysloveme.com
*.talkwithgirl.xyz
*.thompsonsgolfcarts.com
*.twitchls.tv
*.uniquetwist.com
*.viplocalsexycontacts.top
*.vitamin-t-mangel.de
*.volakstream.me
*.vulcanologia.com
*.xn--ernhrngsberatung-xnb.de
*.xn--ferienhuserg-mcb.de
*.xn--ferienhuserh-mcb.de
*.xn--llungenentzndung-tzb.de
*.xn--steuerermklrung-blb.de
*.xpromakets.com
achblueten.de
americannitional.com
anzeichen-von-depressionen.de
assyrianaustraliansocialdevelopmentclub.org
astrokeabove.com
bisexualdating.vip
bitcoincartera.com
blasenntzuendung.de
bundesarztkammer.de
casles.cc
cinemavoir.co
dharris.com
embracevelocity.cn
eurofins.me
fundaciondarchile.org
gardenersaadvice.info
goststream.site
healthallianceplan.org
huayraquimbal.org
ikkouan.com
itutor.online
junita.com
koerperfunktionen.de
krankengmnastik.de
lds.tools
marlald1.top
mtwer.org
mutiple-sklerose.de
nuestracultura.com
orientierungsfaehigkeit.de
podologiea.de
pulsa-aqui-para-ver.info
rugworld.org
seakingarrangments.com
sysloveme.com
talkwithgirl.xyz
thompsonsgolfcarts.com
twitchls.tv
uniquetwist.com
viplocalsexycontacts.top
vitamin-t-mangel.de
volakstream.me
vulcanologia.com
xn--ernhrngsberatung-xnb.de
xn--ferienhuserg-mcb.de
xn--ferienhuserh-mcb.de
xn--llungenentzndung-tzb.de
xn--steuerermklrung-blb.de
xpromakets.com

Other certificates including the domain name healthallianceplan.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for healthallianceplan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427602096806783465428925120863408530438752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 10:32:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 10:32:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthallianceplan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822946992951272250231029946362777464540832340987785869745845018054180440766062482817197932499149737190899928387003517173958586869125417563349058051876075422120014756848758394411397547480648511262126166073529513143950262659360424029611438796279726518253150210745783784084720267309792626403090749628904786840810057790605470106530144612112709317197757633003319187152494180440122166501879969918164415822261285665506895630689940017451098338633967667818360463813385057389396493910599910087274802653738969177360536729651809329037577618765565589892801113268944828781002752191194510457417483378017917386290907452341898657986840822084796131348511890384952891199725628674509270999211632121837782340331511413048727367618142694582914054006993395825740351704687510357806877619016232033660612704444953505223247149847965681923221874390141209603116758877939856749142617133833181118337346740150627711529119442099957509040232021950477711702016919527788944381263292166198446349915761559066260923632975225144713482801736962406744133750312890329470295256339508216587052406112484230161019305158077761994357124782845796899067662596389312035372714507560824542216774532278706911903847864328417232975213878176427224992439446512402520209503218042919952801940433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e5ffe25543c817952ae6952adfc2d68d7601e6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2056 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achblueten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americannitional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anzeichen-von-depressionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assyrianaustraliansocialdevelopmentclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrokeabove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bisexualdating.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoincartera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blasenntzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bundesarztkammer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casles.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemavoir.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embracevelocity.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurofins.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundaciondarchile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardenersaadvice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goststream.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthallianceplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huayraquimbal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikkouan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itutor.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koerperfunktionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krankengmnastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lds.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marlald1.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtwer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutiple-sklerose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuestracultura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orientierungsfaehigkeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podologiea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pulsa-aqui-para-ver.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rugworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seakingarrangments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sysloveme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talkwithgirl.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thompsonsgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twitchls.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniquetwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viplocalsexycontacts.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitamin-t-mangel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volakstream.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vulcanologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ernhrngsberatung-xnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ferienhuserg-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ferienhuserh-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--llungenentzndung-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuerermklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xpromakets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achblueten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americannitional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anzeichen-von-depressionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assyrianaustraliansocialdevelopmentclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrokeabove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bisexualdating.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoincartera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blasenntzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundesarztkammer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casles.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemavoir.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embracevelocity.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurofins.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundaciondarchile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenersaadvice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goststream.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthallianceplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huayraquimbal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikkouan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itutor.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koerperfunktionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krankengmnastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lds.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlald1.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutiple-sklerose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuestracultura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orientierungsfaehigkeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podologiea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsa-aqui-para-ver.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seakingarrangments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysloveme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkwithgirl.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thompsonsgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitchls.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniquetwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viplocalsexycontacts.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitamin-t-mangel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volakstream.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vulcanologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ernhrngsberatung-xnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ferienhuserg-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ferienhuserh-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--llungenentzndung-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuerermklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpromakets.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd7e72aca0000040300463044022008263f03745af48e579c69aab45d64fbd076b8290ef0ea189b58f6df68ad8402022033efda1bb3f6fdff3312332445154bbf6110eaf8501287f0ea59e8b0745d31940076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd7e72acd0000040300473045022100fd62d553e9befd61a6d8b35500864f0f5400139b68e7def8701097382800d846022054e7b9b4a6c74a7c7b86f20bbbc109e80fa311ac1e8cbf4905c5f8183d79b77f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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