generation.icu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:26:ce:64:80:46:4e:d9:74:a6:3b:56:ee:9b:09:a2:21 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=generation.icu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:26:ce:64:80:46:4e:d9:74:a6:3b:56:ee:9b:09:a2:21
Serial Number (int): 293374982601245564923890362617783831339553
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:49:3b:c6:64:f0:28:2c:73:df:8c:70:fa:f0:23:75:1e:18:54:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:f0:ae:39:0e:59:7d:e3:8b:45:e7:62:81:c2:50:7b:66:81:a9:e2
Fingerprint (sha256): 50:4a:ef:02:86:3c:0d:64:0d:9f:34:a5:72:a4:85:d0:90:31:81:3a:1b:de:35:6d:3d:fb:f6:04:cc:4d:45:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate generation.icu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for generation.icu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3dfxtech.net
*.aptitudetests.com.au
*.bestdrive.in
*.biggie.com.au
*.bvg-fahrplanauskunft.de
*.citroen-birmingham.co.uk
*.codliveroil.com.au
*.concession.com.au
*.entitlementcard.org
*.flowergirldresses.com.au
*.freemobilephone.net
*.freewillkit.com.au
*.freezer.com.au
*.generation.icu
*.germqnwings.de
*.graniteslabs.com.au
*.hardcore24.de
*.hox.eu
*.kahului.com.au
*.kloudhub.in
*.luxuryvacation.com.au
*.massagechairs.com.au
*.massages.com.au
*.mensenling.nl
*.moneybelt.com.au
*.papieflieger.de
*.pariz.de
*.r621.net
*.rarot.de
*.rauch-frei-info.de
*.rauchgenerator.de
*.reflector.com.au
*.rehmadmoos.de
*.rel.de
*.ringgroesse.de
*.sefan.net
*.spanische-treppe.de
*.tachometer.com.au
*.topteenmodels.net
*.transistor.com.au
*.vulture.com.au
*.xn--dnengras-65a.de
*.xn--drukcerzubehr-tmb.de
*.xn--fachlektre-heb.de
*.xn--hobby-bcker-r8a.de
*.xn--nicotinsureamid-7kb.de
*.xn--pter-5qa.de
*.xn--schneckenhuser-fib.de
*.xn--systembder-w5a.de
*.xn--wasserspielpltze-7nb.de
3dfxtech.net
aptitudetests.com.au
bestdrive.in
biggie.com.au
bvg-fahrplanauskunft.de
citroen-birmingham.co.uk
codliveroil.com.au
concession.com.au
entitlementcard.org
flowergirldresses.com.au
freemobilephone.net
freewillkit.com.au
freezer.com.au
generation.icu
germqnwings.de
graniteslabs.com.au
hardcore24.de
hox.eu
kahului.com.au
kloudhub.in
luxuryvacation.com.au
massagechairs.com.au
massages.com.au
mensenling.nl
moneybelt.com.au
papieflieger.de
pariz.de
r621.net
rarot.de
rauch-frei-info.de
rauchgenerator.de
reflector.com.au
rehmadmoos.de
rel.de
ringgroesse.de
sefan.net
spanische-treppe.de
tachometer.com.au
topteenmodels.net
transistor.com.au
vulture.com.au
xn--dnengras-65a.de
xn--drukcerzubehr-tmb.de
xn--fachlektre-heb.de
xn--hobby-bcker-r8a.de
xn--nicotinsureamid-7kb.de
xn--pter-5qa.de
xn--schneckenhuser-fib.de
xn--systembder-w5a.de
xn--wasserspielpltze-7nb.de

Other certificates including the domain name generation.icu

(limited to 100 certificates)

Certificate

The complete raw certificate details for generation.icu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN6DCCDNCgAwIBAgISA14mzmSARk7ZdKY7Vu6bCaIhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTYyMzM0MDlaFw0y
MDAzMTUyMzM0MDlaMBkxFzAVBgNVBAMTDmdlbmVyYXRpb24uaWN1MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv0ci+tfY214OQP194l3T9W35O185D2lR
jNNTLzQJXmNBskNMoYsV83n5KvGAEc1OLn7x0gufetitT7LYHrkRDXGYHzxaGg2w
usE483jhNex0QcMwvbJ8uY0X0HV6lv7duXJVdkO5IOcGG01c+gnUqawfsanHRyaM
QmfhP7b2Bf/QX8Kz79WgQLziYYKxj0st4/BmBKs4mMgenNAxNOvbHYKGRP4nkWaM
1r0Op8xrHetbl5e5X/0Xgc6pfKJczeofHsxWpdzX+fd86jlIF8KS5jHMBmvNPAn/
zZc8NUWY13REgSzNlAmFwCCHuzT+YX109iReZmunv921TlnKka96X5dmm7YSHWOe
OyyW64ApxD8K6RRLSAd8Arak8he2SZSucbw+bWnDd8R7kK88rYmdxnYBoq7AWped
6aOQMb/L9gPRyU0KHSF1AQ4LwHjKwZ3E19Y5HiP90uWs6h/TiqfjAZ+hGblgxmok
v0vWomGMCHJFaNMGCrwJGnsTrhFXz7y2Dbhm6geUr8dReZj1ov+Mrff/hfgyD3kM
VKovYgYGoSkkBE3+VRJmbINHdkpYHQ2tUINdMGwa1Ydw9BgkvR9JMj4cn3KkPpxn
zvfxCf+2BeMETFHHlGfz0LLKOdH/EyqwrCSrAuECmJnmFFVMXSJ/u2wPELrUG3M2
5hFKSN+x4VMCAwEAAaOCCfcwggnzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUoEk7
xmTwKCxz34xw+vAjdR4YVCgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzCCB6sGA1UdEQSCB6Iwggeegg4qLjNkZnh0ZWNo
Lm5ldIIWKi5hcHRpdHVkZXRlc3RzLmNvbS5hdYIOKi5iZXN0ZHJpdmUuaW6CDyou
YmlnZ2llLmNvbS5hdYIZKi5idmctZmFocnBsYW5hdXNrdW5mdC5kZYIaKi5jaXRy
b2VuLWJpcm1pbmdoYW0uY28udWuCFCouY29kbGl2ZXJvaWwuY29tLmF1ghMqLmNv
bmNlc3Npb24uY29tLmF1ghUqLmVudGl0bGVtZW50Y2FyZC5vcmeCGiouZmxvd2Vy
Z2lybGRyZXNzZXMuY29tLmF1ghUqLmZyZWVtb2JpbGVwaG9uZS5uZXSCFCouZnJl
ZXdpbGxraXQuY29tLmF1ghAqLmZyZWV6ZXIuY29tLmF1ghAqLmdlbmVyYXRpb24u
aWN1ghAqLmdlcm1xbndpbmdzLmRlghUqLmdyYW5pdGVzbGFicy5jb20uYXWCDyou
aGFyZGNvcmUyNC5kZYIIKi5ob3guZXWCECoua2FodWx1aS5jb20uYXWCDSoua2xv
dWRodWIuaW6CFyoubHV4dXJ5dmFjYXRpb24uY29tLmF1ghYqLm1hc3NhZ2VjaGFp
cnMuY29tLmF1ghEqLm1hc3NhZ2VzLmNvbS5hdYIPKi5tZW5zZW5saW5nLm5sghIq
Lm1vbmV5YmVsdC5jb20uYXWCESoucGFwaWVmbGllZ2VyLmRlggoqLnBhcml6LmRl
ggoqLnI2MjEubmV0ggoqLnJhcm90LmRlghQqLnJhdWNoLWZyZWktaW5mby5kZYIT
Ki5yYXVjaGdlbmVyYXRvci5kZYISKi5yZWZsZWN0b3IuY29tLmF1gg8qLnJlaG1h
ZG1vb3MuZGWCCCoucmVsLmRlghAqLnJpbmdncm9lc3NlLmRlggsqLnNlZmFuLm5l
dIIVKi5zcGFuaXNjaGUtdHJlcHBlLmRlghMqLnRhY2hvbWV0ZXIuY29tLmF1ghMq
LnRvcHRlZW5tb2RlbHMubmV0ghMqLnRyYW5zaXN0b3IuY29tLmF1ghAqLnZ1bHR1
cmUuY29tLmF1ghUqLnhuLS1kbmVuZ3Jhcy02NWEuZGWCGioueG4tLWRydWtjZXJ6
dWJlaHItdG1iLmRlghcqLnhuLS1mYWNobGVrdHJlLWhlYi5kZYIYKi54bi0taG9i
YnktYmNrZXItcjhhLmRlghwqLnhuLS1uaWNvdGluc3VyZWFtaWQtN2tiLmRlghEq
LnhuLS1wdGVyLTVxYS5kZYIbKi54bi0tc2NobmVja2VuaHVzZXItZmliLmRlghcq
LnhuLS1zeXN0ZW1iZGVyLXc1YS5kZYIdKi54bi0td2Fzc2Vyc3BpZWxwbHR6ZS03
bmIuZGWCDDNkZnh0ZWNoLm5ldIIUYXB0aXR1ZGV0ZXN0cy5jb20uYXWCDGJlc3Rk
cml2ZS5pboINYmlnZ2llLmNvbS5hdYIXYnZnLWZhaHJwbGFuYXVza3VuZnQuZGWC
GGNpdHJvZW4tYmlybWluZ2hhbS5jby51a4ISY29kbGl2ZXJvaWwuY29tLmF1ghFj
b25jZXNzaW9uLmNvbS5hdYITZW50aXRsZW1lbnRjYXJkLm9yZ4IYZmxvd2VyZ2ly
bGRyZXNzZXMuY29tLmF1ghNmcmVlbW9iaWxlcGhvbmUubmV0ghJmcmVld2lsbGtp
dC5jb20uYXWCDmZyZWV6ZXIuY29tLmF1gg5nZW5lcmF0aW9uLmljdYIOZ2VybXFu
d2luZ3MuZGWCE2dyYW5pdGVzbGFicy5jb20uYXWCDWhhcmRjb3JlMjQuZGWCBmhv
eC5ldYIOa2FodWx1aS5jb20uYXWCC2tsb3VkaHViLmlughVsdXh1cnl2YWNhdGlv
bi5jb20uYXWCFG1hc3NhZ2VjaGFpcnMuY29tLmF1gg9tYXNzYWdlcy5jb20uYXWC
DW1lbnNlbmxpbmcubmyCEG1vbmV5YmVsdC5jb20uYXWCD3BhcGllZmxpZWdlci5k
ZYIIcGFyaXouZGWCCHI2MjEubmV0gghyYXJvdC5kZYIScmF1Y2gtZnJlaS1pbmZv
LmRlghFyYXVjaGdlbmVyYXRvci5kZYIQcmVmbGVjdG9yLmNvbS5hdYINcmVobWFk
bW9vcy5kZYIGcmVsLmRlgg5yaW5nZ3JvZXNzZS5kZYIJc2VmYW4ubmV0ghNzcGFu
aXNjaGUtdHJlcHBlLmRlghF0YWNob21ldGVyLmNvbS5hdYIRdG9wdGVlbm1vZGVs
cy5uZXSCEXRyYW5zaXN0b3IuY29tLmF1gg52dWx0dXJlLmNvbS5hdYITeG4tLWRu
ZW5ncmFzLTY1YS5kZYIYeG4tLWRydWtjZXJ6dWJlaHItdG1iLmRlghV4bi0tZmFj
aGxla3RyZS1oZWIuZGWCFnhuLS1ob2JieS1iY2tlci1yOGEuZGWCGnhuLS1uaWNv
dGluc3VyZWFtaWQtN2tiLmRlgg94bi0tcHRlci01cWEuZGWCGXhuLS1zY2huZWNr
ZW5odXNlci1maWIuZGWCFXhuLS1zeXN0ZW1iZGVyLXc1YS5kZYIbeG4tLXdhc3Nl
cnNwaWVscGx0emUtN25iLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfj
meHQNKawqKqOsnMAAAFvEUbLcwAABAMARzBFAiB2v/FqM1xDCPQzRDod5wdgmUHt
ol0Dcn3lCtRVJVlEYwIhAKTAO4eX3GQjUC2o5jmz8z6eV/doQnwlUUZT7dKVbysf
AHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvEUbLoQAABAMA
RzBFAiEAydu1MuUi12LZqut0K3+q32DSqtsUqxY7hZHUNKjLxd8CIEiYHuvM7WZJ
O1Lz6ddkqKkBUd5JikImSQbgvc8ritT+MA0GCSqGSIb3DQEBCwUAA4IBAQAb8WMP
mJuKUDPHaY7GUpLzJMMcYDMvjyiZ1D9FtcjLo3wpypkB1HU/q9lWtO1UqZQGqVpt
bDZRDx2owwZuhuan4CsVAlEuQo6GIRZQ6qzFHbTebWR+9GF7zM1xXlj7QRLWvhSL
ngvX/m8zSKfDpFGOQn52Csfss4GAHYJOKzPbYVEfGkxAcuIxmVEpCQ4Yu+EYtmf9
WvvM29lYDYskN+MdtOvxjI/75OaM04OwZMKCSH1nbQHDlzCP51cJ/Y+0skR/v6Kz
87SSTLZ9O/4BQzs4/SsFOYpJlW4ixdygsrm2vdovxqlTV76DzHe0xkGVVyWPoB2V
EB23aHT/0AXlc/5A
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293374982601245564923890362617783831339553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 23:34:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 23:34:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'generation.icu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780345658287355589370655175796574691382311854236112508635770428593926526655579245557019202820929834654459124327953785251434495029790622488420223775199968943127290479163742017822345031131776472317972474447995580585573487489030414549959905523714982384496107030477342952658724760712567674509730518680118858595049067984088639518936143906530273591587275336224537520350826672252147078642181428607244798554655979905296229107915944128620566334952673030602542024345150652064308029912727765529742378939321620248842782077185837950624920708944982582346135003632794430194352318741226428895222615219716095385052273032865038505270074187539544741800749506006887402094071362976576612755154418174130376526532894707828086931340550653207596334799826569801309891580526416413346787836873223333082501327596539229490251245316203060104778858424658407009173281877170071525981309412613578911001698731133718357531981005341317698237532505698687411181114424067581043405294063364267870894428365134327225680264072819623899339677059049502486483687786747783371040522756447715644920018335779492941613096888313327937831671035417029590086021407665263208300246742391178602234640201772360786087825020981883345514326869531792055951456831966617456956337980564558467130581331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0493bc664f0282c73df8c70faf023751e185428
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dfxtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aptitudetests.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestdrive.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biggie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bvg-fahrplanauskunft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citroen-birmingham.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codliveroil.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concession.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entitlementcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowergirldresses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemobilephone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freewillkit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freezer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generation.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.germqnwings.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graniteslabs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardcore24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hox.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahului.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kloudhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxuryvacation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massagechairs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mensenling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneybelt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papieflieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pariz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r621.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rarot.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rauch-frei-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rauchgenerator.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reflector.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rehmadmoos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ringgroesse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sefan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spanische-treppe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tachometer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topteenmodels.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transistor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vulture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dnengras-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--drukcerzubehr-tmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fachlektre-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hobby-bcker-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nicotinsureamid-7kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pter-5qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schneckenhuser-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--systembder-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wasserspielpltze-7nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dfxtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptitudetests.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestdrive.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvg-fahrplanauskunft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citroen-birmingham.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codliveroil.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concession.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entitlementcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowergirldresses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemobilephone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freewillkit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freezer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generation.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'germqnwings.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graniteslabs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardcore24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hox.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahului.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kloudhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryvacation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massagechairs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mensenling.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneybelt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papieflieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pariz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r621.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarot.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauch-frei-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauchgenerator.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflector.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rehmadmoos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringgroesse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sefan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanische-treppe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tachometer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topteenmodels.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transistor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vulture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dnengras-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--drukcerzubehr-tmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fachlektre-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hobby-bcker-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nicotinsureamid-7kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pter-5qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schneckenhuser-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--systembder-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wasserspielpltze-7nb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f1146cb730000040300473045022076bff16a335c4308f433443a1de707609941eda25d03727de50ad45525594463022100a4c03b8797dc6423502da8e639b3f33e9e57f768427c25514653edd2956f2b1f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1146cba10000040300473045022100c9dbb532e522d762d9aaeb742b7faadf60d2aadb14ab163b8591d434a8cbc5df022048981eebcced66493b52f3e9d764a8a90151de498a42264906e0bdcf2b8ad4fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001bf1630f989b8a5033c7698ec65292f324c31c60332f8f2899d43f45b5c8cba37c29ca9901d4753fabd956b4ed54a99406a95a6d6c36510f1da8c3066e86e6a7e02b1502512e428e86211650eaacc51db4de6d647ef4617bcccd715e58fb4112d6be148b9e0bd7fe6f3348a7c3a4518e427e760ac7ecb381801d824e2b33db61511f1a4c4072e231995129090e18bbe118b667fd5afbccdbd9580d8b2437e31db4ebf18c8ffbe4e68cd383b064c282487d676d01c397308fe75709fd8fb4b2447fbfa2b3f3b4924cb67d3bfe01433b38fd2b05398a49956e22c5dca0b2b9b6bdda2fc6a95357be83cc77b4c6419557258fa01d95101db76874ffd005e573fe40