sfg-manching.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:d0:45:a6:b2:99:b7:bd:aa:96:db:93:d7:d1:99:6b:2f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sfg-manching.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:d0:45:a6:b2:99:b7:bd:aa:96:db:93:d7:d1:99:6b:2f
Serial Number (int): 300746171063825345112148218774159059675951
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:c2:af:4f:7a:aa:37:c1:23:b1:90:80:0a:f6:46:fc:1b:ae:5a:55
Fingerprint (sha256): 53:95:d1:b6:19:e6:3d:d6:b4:83:3d:15:71:8d:60:0c:13:0e:9a:8f:dd:8a:7d:26:4a:51:1c:76:d0:22:6a:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sfg-manching.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfg-manching.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2thelastdetail.com
ah.synctalk.us
apps.mgviz.org
ashley.3dcloud.io
audiovideoplanet.com
auth.safedata.me
bot.gyded.me
braintegral.com
camjens.com
canopy.app
civitimeapp.dev
cms.bbr.appetiserdev.tech
console.visioconsult.care
cseducacion.com.ar
de.gympassplus.webplayer.fit
demo.synctalk.us
dev.personalcollection.cards
dev.pied.app
develop.kite.ap-com.app
docs.w4d.ithryn.app
eu.fireaudit.studio
facewall.live
fundme.yes4youth.co.za
getmetals.com
grit.today
hamna.app
hannahdehde.com
happinessisajourney.com
herlonexsupplies.com
hub.orijin.io
internview.tech
jurisdiccion.rebus.com.co
kite.ap-com.app
knitting.matthewbickell.co.uk
landing-beta.origin.bloombox.cloud
link.protagged.eu
nestmate.co
nitrkl.in
nuitomo.app
openteam.space
portfolio-new.rahul-dutt.dev
product-management.it
quizzes.mattchaffe.uk
redigio.com.br
reserved.newship.net
sfg-manching.de
stage.app.lupuo.com
stage.mailcheck.co
staging.mamacita.hu
stcheck.mtdev.net
store.bookinggood.net
strava-explorer.r42.ca
su.orijin.io
super.enercred.com.br
synctalk.us
take-away.cheffle.se
theappmaster.com.ar
thjonusta.aur.is
trace.orijin.io
traveller.nikx.co
vetemenyem-bolt.hu
vote.ntsl.cf
wetips.funwarioisii.me
www.abonnement.amtsavisen.dk
www.abonnement.dagbladet-holstebro-struer.dk
www.abonnement.dbrs.dk
www.abonnement.faa.dk
www.abonnement.folkebladetlemvig.dk
www.abonnement.hsfo.dk
www.abonnement.jv.dk
www.abonnement.vafo.dk
www.abonnement.viborg-folkeblad.dk
www.braintegral.com
www.buncha.app
www.civitimeapp.dev
www.fieldforceapp.com
www.hefa.lt
www.informma.com
www.kite.ap-com.app
www.lfmenergy.com
www.manycontent.com.br
www.nomrasco.com
www.nowthoughts.com
www.nuitomo.app
www.nvkcs.com
www.product-management.it
www.prototipo.movistargaming.com
www.qsafe.co
www.redigio.com.br
www.smartadviser.co.uk
www.smartautofinancial.ca
www.synctalk.us
www.theroaragency.com.au
www.try-catch.app
www.valere-capital.com
www.vetemenyem-bolt.hu
www.wannawash.nl
www.wedocontracting.ca
www.wirwunder.org
yue-w.com

Other certificates including the domain name sfg-manching.de

(limited to 100 certificates)
www.fight2020.com.my
carspa.app
sfg-manching.de
www.newbrains.net
briancbarrow.com
www.giovannihomeimprovementinc.com
andrewthecreator.com
tednz.win
pitchcenterapp.com
onegraphapp.com
www.splashweave.com
robotplaytime.com
www.tryrebellion.com
americatopdoctors.com
link.cashrichapp.com
www.schedulite.net
lead.gettwoit.com
andrewthecreator.com
andrewthecreator.com
www.codeplots.com
orbis.jyutai.jp
sfg-manching.de
www.tryrebellion.com
www.fight2020.com.my
volunteer.delivery
quandospesa.com
briancbarrow.com
pour-data.com
couleurquiz.de
sneleenairco.nl
www.splashweave.com
golofi.com
reg.smartsoft.in
intern.sfg-manching.de
pedixwpp.com
admin.millsapvalley.com
gift.neoufitness.com
todayilearned.co
remap.website
www.sfg-manching.de
color.httpanda.com
fastify.pandicorn.app
www.9cv.app
tednz.win
www.9cv.app
thtask.e-spirit-demo.de
www.klukvochka.ru
fastify.pandicorn.app
admin.millsapvalley.com
www.mettifogo.eu
pedixwpp.com
chiwawows.com
sethnuzum.com
redfield.southvilledeli.com
www.clelectrical.co.nz
www.payed.africa
onegraphapp.com
sfg-manching.de
brijwasikb.com

Certificate

The complete raw certificate details for sfg-manching.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300746171063825345112148218774159059675951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 19:23:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-29 19:23:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sfg-manching.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2thelastdetail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ah.synctalk.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mgviz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashley.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiovideoplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.safedata.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.gyded.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braintegral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camjens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canopy.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civitimeapp.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.bbr.appetiserdev.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.visioconsult.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cseducacion.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.gympassplus.webplayer.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.synctalk.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.personalcollection.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pied.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.kite.ap-com.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.w4d.ithryn.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.fireaudit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facewall.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundme.yes4youth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grit.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamna.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannahdehde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happinessisajourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herlonexsupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.orijin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internview.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jurisdiccion.rebus.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kite.ap-com.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knitting.matthewbickell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing-beta.origin.bloombox.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.protagged.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestmate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitrkl.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuitomo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openteam.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-new.rahul-dutt.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product-management.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizzes.mattchaffe.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redigio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserved.newship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfg-manching.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.app.lupuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mailcheck.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mamacita.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcheck.mtdev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.bookinggood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strava-explorer.r42.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su.orijin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super.enercred.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synctalk.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'take-away.cheffle.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theappmaster.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thjonusta.aur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trace.orijin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traveller.nikx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetemenyem-bolt.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.ntsl.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetips.funwarioisii.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.amtsavisen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.dagbladet-holstebro-struer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.dbrs.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.faa.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.folkebladetlemvig.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.hsfo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.jv.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.vafo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abonnement.viborg-folkeblad.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.braintegral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buncha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civitimeapp.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieldforceapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hefa.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.informma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kite.ap-com.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfmenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manycontent.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nomrasco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nowthoughts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuitomo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvkcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.product-management.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prototipo.movistargaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qsafe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redigio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartadviser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartautofinancial.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synctalk.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theroaragency.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.try-catch.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valere-capital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetemenyem-bolt.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wannawash.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wedocontracting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wirwunder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yue-w.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001726c674d9a000004030046304402205ae2ab140a60397a1d3a2aea5f06b486490ee8e043302e6086b01b94d212352802203d782b48dda348c1731903595aa82809356e8497a8ebe662695f34b636985ac500770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001726c674deb000004030048304602210090f8b39a4b45cd2c21437df252c9bc9bd147661b9a30cb5ebd8601f89df9a72d022100d3e15a64e9a9a36fcda2c89a8c543469b54539012143a5ea4ca17e1a6327d1c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028c0e6cec1e5e86bf964d09194fb1d029185c89d69796736a73e384ef56d9eacf18a0f72b2ddc27b2556cda64ace2576480f7587488574f6459b1c430a1966135d4aca4aef815eec76c1ca0f41ca7395d24085352789600699430d62b43f25180b184d8bc87129936eb3103721bbfadb93371e84ea372f0375821c4b61d0ed7f7757282141962dfe0d976a48ba2496e6a405c32520006ea27e58e47e8940fb04bd60efc9eeb211aa36301a52e8200292c7b6c5ce82d7a3eadda778ce73f7701a386eb8a002a2d36be0989c05bde79ff5fa1eb19f2429a408f2cdf6aa70e69be2a3ef34463987734e45cb00e46f4be3ba949725e8ce92d2e4a03b54ed3f966a25