bestcare.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:fb:c1:2f:76:cf:d0:a5:17:58:d4:56:9d:12:5d:d3:59 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bestcare.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:fb:c1:2f:76:cf:d0:a5:17:58:d4:56:9d:12:5d:d3:59
Serial Number (int): 287532956984194264450455676287377439839065
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:e7:fc:99:47:78:a9:31:b3:7a:35:46:6d:4a:39:a9:f2:11:07:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:4a:4b:ba:3c:17:86:1f:e5:94:40:44:87:53:30:6b:af:56:7c:36
Fingerprint (sha256): 55:26:ba:a2:dc:a8:30:1a:f7:2c:6e:9f:61:10:31:e0:42:6f:dd:93:6b:3b:63:a4:a2:8d:c1:ef:04:c0:4f:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bestcare.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bestcare.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.18yo.tv
*.auspuffschelle.de
*.baustofhandel.de
*.bestcare.pt
*.datashine.org
*.dating-site.org
*.dc2dailyconservative.com
*.divinedesserts.org
*.dyc.com.au
*.ecotaxi.cz
*.geburtstagsvorlage.de
*.go4scools.com
*.gsp-games.co.uk
*.hallo-kleinanzeigen.de
*.healthquestionaire.co.uk
*.imperiumplymouth.com
*.industriehydraulik.de
*.jn10.co.uk
*.kranknkassen.de
*.laundries.com.au
*.mammal.com.au
*.modellzubehoer.de
*.mortgagecalc.com.au
*.motivatin.de
*.nanaimowebsite.ca
*.passthebadge.com
*.pbt.us
*.pharmarcy2u.co.uk
*.poolsolar.com.au
*.progolfers.com.au
*.rainman.com.au
*.readcdaloudrevival.com
*.samtheman.com.au
*.scheishaus.de
*.socialtree.ca
*.spreadeagle-wireless.co.uk
*.sypilis.de
*.tvtables.com.au
*.walnussschnaps.de
*.warleydsl.com
*.wheelersclocks.co.uk
*.windgeneratoren.nl
*.xn--annanasdit-y5a.de
*.xn--annuittenberechnung-lwb.de
*.xn--ernhrungplan-icb.de
*.xn--fitnessgetrnke-gib.de
*.xn--sssgraskapseln-gsb.de
*.yorkshireequineproducts.co.uk
*.yqhoo.co.uk
*.zit.com.au
18yo.tv
auspuffschelle.de
baustofhandel.de
bestcare.pt
datashine.org
dating-site.org
dc2dailyconservative.com
divinedesserts.org
dyc.com.au
ecotaxi.cz
geburtstagsvorlage.de
go4scools.com
gsp-games.co.uk
hallo-kleinanzeigen.de
healthquestionaire.co.uk
imperiumplymouth.com
industriehydraulik.de
jn10.co.uk
kranknkassen.de
laundries.com.au
mammal.com.au
modellzubehoer.de
mortgagecalc.com.au
motivatin.de
nanaimowebsite.ca
passthebadge.com
pbt.us
pharmarcy2u.co.uk
poolsolar.com.au
progolfers.com.au
rainman.com.au
readcdaloudrevival.com
samtheman.com.au
scheishaus.de
socialtree.ca
spreadeagle-wireless.co.uk
sypilis.de
tvtables.com.au
walnussschnaps.de
warleydsl.com
wheelersclocks.co.uk
windgeneratoren.nl
xn--annanasdit-y5a.de
xn--annuittenberechnung-lwb.de
xn--ernhrungplan-icb.de
xn--fitnessgetrnke-gib.de
xn--sssgraskapseln-gsb.de
yorkshireequineproducts.co.uk
yqhoo.co.uk
zit.com.au

Other certificates including the domain name bestcare.pt

(limited to 100 certificates)

Certificate

The complete raw certificate details for bestcare.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287532956984194264450455676287377439839065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 15:29:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 15:29:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bestcare.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779873927384921393835622202660236270714385017193185831794942083257566665014966627681684720162540260295043459085878543812650017194911212015704520187830556534408650170027969998714170203079328312513229523476261872618263088231096935377454336064250130157571330150662483416123527291389929045189629591434911434640954489142525632764582939195317952209398201989656977214436966726169159753206657555330954720604740563771814853239913644707606460629194495977415197481878683603671880863420127082978434933256198608410759326865153455221981147233646227675534337551858768060805827582088802759124284415055160854346010425948922226504174856501981637275121705197724859533495217970069792425049693664110685902672623877927542393440657540383744574810568816909352595873639582500369428180077641925446852827666160935440415946339852203987050230560566916766430018821171038706157192972487297038072536464433192404082817670608706801640702701166000385589269623853122741135046057702421339763339639880887148057502720416144504035277788194413784574740885975914650401403235055738296190540256044341002744069482902573133027133467491407620430942450782578092077640851598136567527148182665063619331363983233807804257733209183791743975568177630969824725407453163885653807067426653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16e7fc994778a931b37a35466d4a39a9f2110782
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1982 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.18yo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auspuffschelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baustofhandel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestcare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datashine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dating-site.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc2dailyconservative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divinedesserts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dyc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecotaxi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geburtstagsvorlage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go4scools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsp-games.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hallo-kleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthquestionaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperiumplymouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.industriehydraulik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jn10.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kranknkassen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laundries.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mammal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modellzubehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagecalc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motivatin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanaimowebsite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passthebadge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pbt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmarcy2u.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poolsolar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.progolfers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rainman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readcdaloudrevival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samtheman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheishaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialtree.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spreadeagle-wireless.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sypilis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvtables.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walnussschnaps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warleydsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheelersclocks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windgeneratoren.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--annanasdit-y5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--annuittenberechnung-lwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ernhrungplan-icb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fitnessgetrnke-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sssgraskapseln-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkshireequineproducts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yqhoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '18yo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auspuffschelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baustofhandel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datashine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dating-site.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc2dailyconservative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinedesserts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotaxi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geburtstagsvorlage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go4scools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp-games.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallo-kleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthquestionaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperiumplymouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industriehydraulik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jn10.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kranknkassen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laundries.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modellzubehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecalc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motivatin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanaimowebsite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passthebadge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmarcy2u.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolsolar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progolfers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readcdaloudrevival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtheman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheishaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialtree.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreadeagle-wireless.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sypilis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvtables.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walnussschnaps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warleydsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelersclocks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windgeneratoren.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--annanasdit-y5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--annuittenberechnung-lwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ernhrungplan-icb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fitnessgetrnke-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sssgraskapseln-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshireequineproducts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqhoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zit.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d738ec5c20000040300473045022100d6f09b90942022cded8752cf29c940a7adc39201f9e0c34de22b642068b70f6f0220153c84667cdb40a92f564d2fa00456cc7ce1d424d9931a58d2b4cd859227eae8007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d738ec5ba0000040300483046022100e4b39827645371ef6af62b9b0f21ed332a37ce81a4d30fe2684c38869f792208022100894ed4751d91eeddc5484bbbc3d9a70303ae25cddf6a103a872173f8a4e6bf38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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