sigi.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:30:64:bd:d4:58:33:e8:39:9f:20:75:62:c9:d4:4d:29 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sigi.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:30:64:bd:d4:58:33:e8:39:9f:20:75:62:c9:d4:4d:29
Serial Number (int): 291346032108005937145233682889795041512745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:7d:68:67:83:77:7f:0a:df:dd:78:f0:75:7a:ad:e8:da:27:ce:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:d6:a9:10:b9:96:b7:dd:57:ff:95:95:69:38:c0:27:a1:a9:a9:21
Fingerprint (sha256): 5c:f6:07:e0:71:bf:a5:2d:be:d1:29:fb:75:6a:65:89:29:b2:f4:b4:6a:6c:92:67:62:02:61:be:e6:6a:e7:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sigi.nl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sigi.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accountantstownsville.com.au
*.adhsf.de
*.advertisinglawyers.com.au
*.airforcesuspension.co.uk
*.ambientewaterfeatures.co.uk
*.backmassager.com.au
*.ballotrights.org
*.carrentalagency.com.au
*.daylightrobbery.com.au
*.dezign.net
*.diaperbags.de
*.diplodocs.cz
*.domainnamebroker.com.au
*.drivingschooltownsville.com.au
*.g7.com.au
*.golfaccessories.com.au
*.golfoutlet.com.au
*.hdn.us
*.heilkrtaeuter.de
*.hfr.us
*.jcrplussize.com.br
*.knowledgeadventure.co.uk
*.live-chat.be
*.managahere.cc
*.modernist.com.au
*.moustaches.com.au
*.mundspreizer.de
*.myautogril.it
*.mycarfinance247.co.uk
*.nli.us
*.northumbrialearning.co.uk
*.ofado.co.uk
*.pdd.us
*.realbooksnow.net
*.roupascosplay.com.br
*.sadhs.de
*.sigi.nl
*.teenieschollgirls.net
*.theroutemaster.net
*.tierheime-krefeld.de
*.versandshopping.de
*.warsaw.com.au
*.wethers.com.au
*.wwwscottsofstow.co.uk
*.wwwwundertax.de
*.xn--benzoesure-w5a.de
*.xn--feinsprhsystem-msb.de
*.xn--holunderbltenlikr-f0b1i.de
*.xn--schilddrsenszintigraphie-2sc.de
*.zehnfingerschreiben.de
accountantstownsville.com.au
adhsf.de
advertisinglawyers.com.au
airforcesuspension.co.uk
ambientewaterfeatures.co.uk
backmassager.com.au
ballotrights.org
carrentalagency.com.au
daylightrobbery.com.au
dezign.net
diaperbags.de
diplodocs.cz
domainnamebroker.com.au
drivingschooltownsville.com.au
g7.com.au
golfaccessories.com.au
golfoutlet.com.au
hdn.us
heilkrtaeuter.de
hfr.us
jcrplussize.com.br
knowledgeadventure.co.uk
live-chat.be
managahere.cc
modernist.com.au
moustaches.com.au
mundspreizer.de
myautogril.it
mycarfinance247.co.uk
nli.us
northumbrialearning.co.uk
ofado.co.uk
pdd.us
realbooksnow.net
roupascosplay.com.br
sadhs.de
sigi.nl
teenieschollgirls.net
theroutemaster.net
tierheime-krefeld.de
versandshopping.de
warsaw.com.au
wethers.com.au
wwwscottsofstow.co.uk
wwwwundertax.de
xn--benzoesure-w5a.de
xn--feinsprhsystem-msb.de
xn--holunderbltenlikr-f0b1i.de
xn--schilddrsenszintigraphie-2sc.de
zehnfingerschreiben.de

Other certificates including the domain name sigi.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for sigi.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291346032108005937145233682889795041512745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 07:38:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 07:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sigi.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679108409726709080359628148184341030093108543160633277309704842234515218356338383329510563273595898679065746332777226810712994247040671942036427483981471892260732017979954648243303411425826161145170276808730673203114932391513047473163471949353638920925322752562475088262857767968588609262306203120101574529696668471604798305181917338473487372811657326654448209211322444877313244553237539356318601299134606620836760646899853283090572747865423944780726124853004905070619050480744904518358270564088266165379996405220322444261706080897166718199035645754503630026315135719773045333064859696166169867479767303629257878229017523242833051554247464117423188943242924798209293932782374898329820571674806333730050599904844184784536385626768212360390928926001176849236681514028917209543762263899625202868167303075848284452059383103659021108106367620826230236099807620402133806475480744577946181660096852633719176068773363565916435468578668042109392689127083797534485545323672771161043013781107723018850442170745570194743151360119687515330280315380001221929644336831019990121831716909682747525387420991413607228439330260521466852717835625122583761092574983158002328711833307905312297278610798450327993220141018954378649062599014100718743241150231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							617d686783777f0adfdd78f0757aade8da27cefc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2056 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accountantstownsville.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adhsf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advertisinglawyers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airforcesuspension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambientewaterfeatures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backmassager.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballotrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrentalagency.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daylightrobbery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dezign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diaperbags.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diplodocs.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainnamebroker.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drivingschooltownsville.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g7.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfaccessories.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfoutlet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heilkrtaeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hfr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcrplussize.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowledgeadventure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-chat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managahere.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moustaches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundspreizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myautogril.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycarfinance247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nli.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northumbrialearning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ofado.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realbooksnow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roupascosplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sadhs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teenieschollgirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theroutemaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierheime-krefeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versandshopping.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warsaw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wethers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwscottsofstow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwwundertax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--benzoesure-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--feinsprhsystem-msb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--holunderbltenlikr-f0b1i.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schilddrsenszintigraphie-2sc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zehnfingerschreiben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountantstownsville.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adhsf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertisinglawyers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airforcesuspension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambientewaterfeatures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backmassager.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballotrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrentalagency.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daylightrobbery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dezign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diaperbags.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diplodocs.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainnamebroker.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivingschooltownsville.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfaccessories.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfoutlet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heilkrtaeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcrplussize.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgeadventure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-chat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managahere.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moustaches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundspreizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myautogril.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycarfinance247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nli.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northumbrialearning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofado.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realbooksnow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roupascosplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadhs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenieschollgirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theroutemaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierheime-krefeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versandshopping.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warsaw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wethers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwscottsofstow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwundertax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--benzoesure-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--feinsprhsystem-msb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--holunderbltenlikr-f0b1i.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schilddrsenszintigraphie-2sc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zehnfingerschreiben.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d71dea940000004030046304402207b37c27c822c2028131ca76cc782b8a3f75848aa96d2bc79ea8d0c170eac239b02207e24addb8dad3a17522cd5817d7e5a055625744120635e847d7b4b77f1b99eb4007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d71dea96b000004030046304402205d554af8cd40fc99c9da1a855a287a7fce9edf87f667fbf7bd2acf7c6e26d743022041b9154b8bd490e14556a5185d2d93c49b3de3bb54370aa1349ae0956569e0e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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