affah.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:01:3e:98:bc:f2:9c:52:83:cf:10:f2:d8:41:96:c8:33:25 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=affah.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:01:3e:98:bc:f2:9c:52:83:cf:10:f2:d8:41:96:c8:33:25
Serial Number (int): 348872631291137687358743599476182694245157
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: df:3e:b4:b2:3d:5a:9b:05:fe:3f:0b:1b:40:64:a8:71:c7:ed:28:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:e8:58:2e:0a:a1:32:68:c1:6b:4b:5a:d3:b5:cc:48:37:b4:06:48
Fingerprint (sha256): 61:8b:fb:05:7c:02:1f:43:96:3b:10:25:db:f7:0b:c9:a6:36:62:7b:ac:78:af:58:7e:bc:50:48:d7:9f:2d:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate affah.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for affah.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aaeropostale.com
*.affah.net
*.annzenfolio.com
*.appraised.com.au
*.attuniversalcards.com
*.bankruptcyservices.com.au
*.barrybakery.com
*.benzobsession.com
*.carafes.com.au
*.cartransporters.com.au
*.cashingect.com
*.cashinjec.com
*.chimneycleaner.com.au
*.chungsofmapperley.co.uk
*.citizenshipapplication.com.au
*.cricktree.net
*.darwinfitness.com.au
*.dishwasher.com.au
*.drinklimit.com
*.dropshipwholesaler.com.au
*.emaid.com.au
*.empleado.net
*.fazi.net
*.flatware.com.au
*.furniturecollections.com.au
*.gml1.co.uk
*.greekfood.com.au
*.highspeedingtraining.co.uk
*.hobartfitness.com.au
*.iananddannielle.com
*.keystoneschoolingonline.com
*.lektire.net
*.lifelessons.com.au
*.lsdt.org
*.millwaukeetool.com
*.minwa.net
*.myaubergebenifits.com
*.mypendingresults.com
*.myutbenefits.com
*.reapfreedom.com
*.recruitmentadvertising.com.au
*.retirementadvisors.com.au
*.sbhbenefitsehr.com
*.shirebenifits.com
*.skintreatments.com.au
*.slipcovers.com.au
*.templetoninvestment.com
*.ugame.com.au
*.worryfreedegrees.com
*.yogazone.com
aaeropostale.com
affah.net
annzenfolio.com
appraised.com.au
attuniversalcards.com
bankruptcyservices.com.au
barrybakery.com
benzobsession.com
carafes.com.au
cartransporters.com.au
cashingect.com
cashinjec.com
chimneycleaner.com.au
chungsofmapperley.co.uk
citizenshipapplication.com.au
cricktree.net
darwinfitness.com.au
dishwasher.com.au
drinklimit.com
dropshipwholesaler.com.au
emaid.com.au
empleado.net
fazi.net
flatware.com.au
furniturecollections.com.au
gml1.co.uk
greekfood.com.au
highspeedingtraining.co.uk
hobartfitness.com.au
iananddannielle.com
keystoneschoolingonline.com
lektire.net
lifelessons.com.au
lsdt.org
millwaukeetool.com
minwa.net
myaubergebenifits.com
mypendingresults.com
myutbenefits.com
reapfreedom.com
recruitmentadvertising.com.au
retirementadvisors.com.au
sbhbenefitsehr.com
shirebenifits.com
skintreatments.com.au
slipcovers.com.au
templetoninvestment.com
ugame.com.au
worryfreedegrees.com
yogazone.com

Other certificates including the domain name affah.net

(limited to 100 certificates)
affah.net

Certificate

The complete raw certificate details for affah.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348872631291137687358743599476182694245157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 07:10:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 07:10:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'affah.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718791450832503450778356833767210554738516100345559802366710215378603047697067605675927582648754013795312358816615379787935206182487930235575989387401538392784078168909352491120936043323661363514704105902214961199887089114281113954694443601147149088381883534637193083828696904441477589490702533211563330710640140275608504701146439295713680510668194736453202202389797027952946215513738899065104917678850183152942649719863787684670820491815658199624422772924604622369268056973233128419045905623553337269904201944125573705543085647889405747971698257085982255105361494645347117791394597642559968716503552653087150436131480886278799264449000081724213145821488391105786208363906713438193451677361477846042856560250246693493535758704270757716851204973581326701401189019728839542437835916972283722044967442570595122992326696724234782703732660045419606375169610284950321153536304275813254884778992200985643286896038884965793956824188180076137231617682183838301702508028939044857101181972255450205564599162724283309268563402570230649516621554259172209642530162891014470703120978385321099604200300926224538949824883789815182416724938346123962371234992048739964192377857396091828005625787181366664126926086585661392289932734951127078216324470569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df3eb4b23d5a9b05fe3f0b1b4064a871c7ed2878
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaeropostale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annzenfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appraised.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attuniversalcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankruptcyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barrybakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benzobsession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carafes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartransporters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashingect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashinjec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chimneycleaner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chungsofmapperley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citizenshipapplication.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cricktree.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darwinfitness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dishwasher.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drinklimit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dropshipwholesaler.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emaid.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empleado.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fazi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flatware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniturecollections.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gml1.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greekfood.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highspeedingtraining.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hobartfitness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iananddannielle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keystoneschoolingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lektire.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifelessons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lsdt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millwaukeetool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minwa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myaubergebenifits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypendingresults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myutbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reapfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recruitmentadvertising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retirementadvisors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbhbenefitsehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirebenifits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skintreatments.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slipcovers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.templetoninvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ugame.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worryfreedegrees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yogazone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaeropostale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annzenfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraised.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attuniversalcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrybakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benzobsession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carafes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartransporters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashingect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashinjec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chimneycleaner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chungsofmapperley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenshipapplication.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricktree.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darwinfitness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dishwasher.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinklimit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dropshipwholesaler.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emaid.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empleado.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fazi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniturecollections.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gml1.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekfood.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highspeedingtraining.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobartfitness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iananddannielle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keystoneschoolingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lektire.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifelessons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsdt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millwaukeetool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minwa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaubergebenifits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypendingresults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myutbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reapfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitmentadvertising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementadvisors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbhbenefitsehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirebenifits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skintreatments.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slipcovers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templetoninvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugame.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worryfreedegrees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogazone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170e264c7420000040300483046022100b2c41a57085bae5a15753c0ea8419c672dc07e92bb2b512e1f4572e7b1a708f0022100b22fdeaa1e3a1973686cb57e8185b07cbc40f4df3906602c4b9bdb53eb7a5761007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e264c74200000403004630440220057072836a191890f5897740dc17d3071fbbd81b9d2bfac5535f120a31c6f33502207770566f5047e5f6fc060f93ad8bfa14d103cb8440e9f0bb05b553287b633aa4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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