itmuseumshop.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:22:8b:8e:35:07:3d:1e:be:db:82:b8:24:79:be:ab:16:cc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itmuseumshop.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:8b:8e:35:07:3d:1e:be:db:82:b8:24:79:be:ab:16:cc
Serial Number (int): 273091959343701884835294277008663337703116
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:31:ea:69:8b:b1:32:8a:22:13:91:c8:5a:dd:b2:41:4e:09:bd:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:fb:2e:0e:14:0f:54:81:33:8f:6f:e5:58:ff:67:c3:ab:ed:8d:c5
Fingerprint (sha256): 4e:de:db:02:f8:30:03:e3:22:75:cd:49:1b:44:cc:8d:3a:f1:8e:ab:df:f1:9e:79:b2:db:ba:c3:ca:2a:d5:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate itmuseumshop.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itmuseumshop.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.africadate.com
*.anina-pectoris.de
*.anklet.com.au
*.apothhekenumschau.de
*.appraisemyplace.com.au
*.baclays.it
*.blooddiamonds.com.au
*.cardridgesave.co.uk
*.cherry-plum.de
*.compactors.co.za
*.customspecialties.net
*.datelinemalaysia.com.my
*.dungeon.com.au
*.easycreditf.de
*.ebay-einanzeigen.de
*.erfarungen.de
*.fempathie.de
*.fetes.com.au
*.grrlathr.com
*.heilparktiker.de
*.hiwatanonadoko.com
*.homoeopathisches-mittel-finden.de
*.itmuseumshop.co.uk
*.jennifermichele.co
*.kostmann-syndrom.de
*.krankengynastik.de
*.livefilms.co.uk
*.losbell.com
*.neurodermtis.de
*.plumber-builderoxford.co.uk
*.prostadta.de
*.rtel.us
*.saotomeandprincipe.co.za
*.shopisaiahthomas.com
*.stille-feiung.de
*.streptokokkeng.de
*.subkortikale-arteriosklerotische-enzephalopathie.de
*.talkshows.co.za
*.tarantinofiction.com
*.tullamarinehotels.com.au
*.ultraphoto.org
*.vintagecarsforsale.com.au
*.vintagetrucks.com.au
*.wikipediua.org
*.wollongongjobs.com.au
*.wwwasisa.es
*.xn--schnappschildkrte-e0b.de
*.xn--veglst-yxa.de
*.xn--zigeunerrcke-djb.de
*.ztdq.cc
africadate.com
anina-pectoris.de
anklet.com.au
apothhekenumschau.de
appraisemyplace.com.au
baclays.it
blooddiamonds.com.au
cardridgesave.co.uk
cherry-plum.de
compactors.co.za
customspecialties.net
datelinemalaysia.com.my
dungeon.com.au
easycreditf.de
ebay-einanzeigen.de
erfarungen.de
fempathie.de
fetes.com.au
grrlathr.com
heilparktiker.de
hiwatanonadoko.com
homoeopathisches-mittel-finden.de
itmuseumshop.co.uk
jennifermichele.co
kostmann-syndrom.de
krankengynastik.de
livefilms.co.uk
losbell.com
neurodermtis.de
plumber-builderoxford.co.uk
prostadta.de
rtel.us
saotomeandprincipe.co.za
shopisaiahthomas.com
stille-feiung.de
streptokokkeng.de
subkortikale-arteriosklerotische-enzephalopathie.de
talkshows.co.za
tarantinofiction.com
tullamarinehotels.com.au
ultraphoto.org
vintagecarsforsale.com.au
vintagetrucks.com.au
wikipediua.org
wollongongjobs.com.au
wwwasisa.es
xn--schnappschildkrte-e0b.de
xn--veglst-yxa.de
xn--zigeunerrcke-djb.de
ztdq.cc

Other certificates including the domain name itmuseumshop.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for itmuseumshop.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273091959343701884835294277008663337703116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 21:39:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 21:39:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itmuseumshop.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837266308492163685521096939786354875858034689250809403362074578819111882339110990266202576330705683830507031283421798368440178535346864551066784731864240532300030306054679188785778341638492664059560498995861081616651862464141399191911828793374517568210311953150879203462457301137553829938625101984785893114292193881050198266791634507163267167745660929026581590572394203433093895639319906422956253459400787309561926254550243599618478594656907912328176615755097863808065256353015001197057936153768771564148614840340227293692260874932794762680314901589118381730113976200821182616832074891667428299792723585454797539133625934845291683341872135378479963894639504630314248510576783049153296937870690755598889316519735740659416809177708653248400487809093139072001152558604309117012894964435612771777641643862618581903291151819521005503031283617815562769155662618627659177565585258110424945544168741497138249557220725144170401359783931129165957838508499301374673602507554367826501788184497070034185976477641448263258125047378553597546830030214482011371476187541866425109876543671829938504503675687780876809749444968634564972855227577238186958772181225302915117477975913807127015581713816095661265182122520480159702271247847146085503421017887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9731ea698bb1328a221391c85addb2414e09bdac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africadate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anina-pectoris.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anklet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apothhekenumschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appraisemyplace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baclays.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blooddiamonds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardridgesave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cherry-plum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compactors.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customspecialties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datelinemalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dungeon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easycreditf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-einanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erfarungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fempathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grrlathr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heilparktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiwatanonadoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homoeopathisches-mittel-finden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itmuseumshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jennifermichele.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kostmann-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krankengynastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livefilms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurodermtis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plumber-builderoxford.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prostadta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtel.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saotomeandprincipe.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopisaiahthomas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stille-feiung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streptokokkeng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subkortikale-arteriosklerotische-enzephalopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talkshows.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarantinofiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tullamarinehotels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultraphoto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vintagecarsforsale.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vintagetrucks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikipediua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wollongongjobs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwasisa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnappschildkrte-e0b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--veglst-yxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--zigeunerrcke-djb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ztdq.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africadate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anina-pectoris.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anklet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apothhekenumschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisemyplace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baclays.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blooddiamonds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardridgesave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherry-plum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compactors.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customspecialties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datelinemalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dungeon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easycreditf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-einanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erfarungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fempathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grrlathr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heilparktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiwatanonadoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homoeopathisches-mittel-finden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itmuseumshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jennifermichele.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostmann-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krankengynastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livefilms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurodermtis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plumber-builderoxford.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prostadta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtel.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saotomeandprincipe.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopisaiahthomas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stille-feiung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streptokokkeng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subkortikale-arteriosklerotische-enzephalopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkshows.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarantinofiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tullamarinehotels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultraphoto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagecarsforsale.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagetrucks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikipediua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wollongongjobs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwasisa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnappschildkrte-e0b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--veglst-yxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zigeunerrcke-djb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ztdq.cc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001895bb56aab000004030047304502210094c8b61633e290a1a431f14972f27c850cde4f49f08a1a5b1c9de49a65e06b68022001dad4d4c8bdc969fe3ea8ea6edeb56206e868f0506139ae6e0fa5ac91bccd88007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001895bb56af60000040300483046022100a3da10291303d3897f7942778a111619340657df631157dc5b6b05ff94b1c296022100da58c7530b347bc8cb7f873f58fec21992c7a903805e62cebbe68f3bb5e242bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0080f6c41ac3fec94e37c5a1e38a4e84bdd03e613d1e0f73740644312c1a4b6d22270b7702f1e17bbbc9bf6c112f65219c477c22b23c705ee0f8470987800be98e7af0e6a528a0e7d579cc356bc251f92f07a83caa822ba3b5b02ba86c2af03e995b4a68524e2172c59de8d3a4fe7c183deedbb13e388ada00ea76b272ab78ff8e9a031fe99693c257d62339b02e8bc32b94b1c3151a5efb43de56d345ab5d197ae989aa47f664df0210fd06c501666794e386d285ceff8399eff6dca7832613c3b3a80e75fe1c46405a1288b45984ac32a7d3bc93d0a96474ddadbfeaaab1054556b4d9a922e122eeedc8349ac9aa996c3c4fb720aa46ef4a43850b09b3346676