renovacaoimediata.com

Issued by R3

About this certificate

This digital certificate with serial number 04:09:a7:3f:86:25:e7:94:ab:45:f1:5e:f7:73:cd:a9:e0:45 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=renovacaoimediata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:09:a7:3f:86:25:e7:94:ab:45:f1:5e:f7:73:cd:a9:e0:45
Serial Number (int): 351733995940173601072038040175921186070597
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:72:c3:72:0d:3b:a6:5a:ee:cc:75:43:79:33:e3:5d:56:04:57:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:72:f6:fb:83:85:9a:59:49:d2:52:dd:7b:25:38:8a:0c:11:e8:4b
Fingerprint (sha256): 64:61:a1:08:fb:de:17:fd:12:e1:bd:b0:6b:87:d1:13:e2:24:49:63:ef:f8:a4:98:73:1f:0c:41:4a:9f:c2:7c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate renovacaoimediata.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for renovacaoimediata.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.10s.in
*.58as.top
*.anantyaridingclub.com
*.assassin.info
*.autoscheibenheizung.de
*.daane.nl
*.deafsports.au
*.definition.com.au
*.diskon.us
*.eikosanoide.de
*.fahrsschule.de
*.fisur.de
*.herveybaypestcontrol.au
*.ipswichflorist.au
*.istorage.in
*.jjblindka.com
*.kithomescanberra.au
*.kredit-versicherung-online.de
*.kronleuchte.de
*.lexusofadelaide.au
*.medicinalweed.au
*.motoreda.de
*.mycheekyglowindia.com
*.mydriasis.de
*.myfantasyleague.au
*.netzwerkswitch.de
*.neven.au
*.porscha.au
*.psychiatrictreatment.de
*.rainsurveys.com
*.realestatedynamics.au
*.renovacaoimediata.com
*.reward-clips.com
*.rewardface.com
*.senecalearning.au
*.senjorentreff.de
*.shiva.com.au
*.signaturebrands.au
*.starwarsmusic.info
*.stonediamonds.au
*.swoopfunding.au
*.thepartylife.au
*.tipcentral.ca
*.trabajosuniversitarioscol.com
*.watchesaustralia.au
*.webrescue.au
*.wetherby.au
*.xn--kindermotorder-gib.de
*.xn--notenbrse-57a.de
*.zinsstrukturkurve.de
10s.in
58as.top
anantyaridingclub.com
assassin.info
autoscheibenheizung.de
daane.nl
deafsports.au
definition.com.au
diskon.us
eikosanoide.de
fahrsschule.de
fisur.de
herveybaypestcontrol.au
ipswichflorist.au
istorage.in
jjblindka.com
kithomescanberra.au
kredit-versicherung-online.de
kronleuchte.de
lexusofadelaide.au
medicinalweed.au
motoreda.de
mycheekyglowindia.com
mydriasis.de
myfantasyleague.au
netzwerkswitch.de
neven.au
porscha.au
psychiatrictreatment.de
rainsurveys.com
realestatedynamics.au
renovacaoimediata.com
reward-clips.com
rewardface.com
senecalearning.au
senjorentreff.de
shiva.com.au
signaturebrands.au
starwarsmusic.info
stonediamonds.au
swoopfunding.au
thepartylife.au
tipcentral.ca
trabajosuniversitarioscol.com
watchesaustralia.au
webrescue.au
wetherby.au
xn--kindermotorder-gib.de
xn--notenbrse-57a.de
zinsstrukturkurve.de

Other certificates including the domain name renovacaoimediata.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for renovacaoimediata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1iJRxGPMse1H3tNtwh+a
KTpEofNrqPud2EOoVE5Wupr+IFus5R+uUBGZlNcnCsa2LkZ9c1YCENV2M+VmPpx8
bDphV87eF8+9StcBA72gvMenpZb5DwIPcFchz+sLx/LvXNfu9Lb0Rp7Odcsqnk7e
Pey7YcEOA2p0gbwFDCtqVuvqxXjgrdknoXUBsZfGjM6AuCQ3y8Jmt1K6GgmnrXxb
9QZ24glt+FPdZjZPSXKTVLuBHR7Qj99+bwRq1idLsH34qJ//5X2ya0GbLmRcfPMQ
8dialH3KproltGiuXOeCZvSk8ZVfJEVVNDQ6M6V3ImmNF3LBCB3iXgjm6JhZHzTH
wBHPJmnREEXq8tBwHOausDPV8b3mMC83UPmWg0Q/5HYeiaDPbaJ/yz6377yc1LMy
dUfMxLmECWPYyz3XG5aJqYswQAYBmaeCaiTe2wLkGptZVSJjb8QoaCq/c5pxb/wf
NbGKhn5wDSXUKOfFIhsakZ4VN7fnEeJ0YZlQWRMZM2Cwbe0J8EMKDBdIciHU2+D6
+KFaXJ7cY1quEqF715WW4nqgB/GXpg7hcN7bbSOPX/Xo6dHF9F5vzUkt2lVMo2je
9jJwxT6NaU2q+vaTNYt66Xp4uvc/QYYDnL1iU/VFgvZ+HbZYh3Sj271qoaZhro1L
aeIJPTmD/8eRXvs8/MyYbBUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351733995940173601072038040175921186070597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 02:27:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 02:27:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renovacaoimediata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873590748324062508192405014914574202124006958471062723137972132273373554600998757288800250798564892300073127706538334480260016766019703672956227129433937802091997666934984338192840997213895787204160849534724613629842982962766183339147319930928298222445961579334689372821123583274619513559416363302828084739093515533711914590940296184154686992024505114759520359318646057976596425519001120833705784040296566033365540023759586406199267403147114280458230955598394132531707784867674817785792525140789900933421336775816984629343188780389656008518239275950108980125343117273086276002365843195812826268745661903661283979785688388140097534729597443384783878580531420236703492111644497915551108834003116967616603353135733149626701430567484183198328118260988628770415812044095102520590100475954757932136227317605432195070517071141701978113618552245772499318263954637893910406009942596398284399605670174524718891857848690019369513289146768336466106335020891390060211852490846329419145497490464314834569279206714529206180988152247858093662365993234293630593406970642341001016676823809719123755831998687476515764734568795827621615870471045093484352470293527909772461073340286707045066717346808643910917446277845506636561959000582515997356852800533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d172c3720d3ba65aeecc75437933e35d560457fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1896 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10s.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.58as.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anantyaridingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assassin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoscheibenheizung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daane.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deafsports.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.definition.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diskon.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eikosanoide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fahrsschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fisur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herveybaypestcontrol.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipswichflorist.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istorage.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjblindka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kithomescanberra.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kredit-versicherung-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kronleuchte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexusofadelaide.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicinalweed.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motoreda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycheekyglowindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydriasis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfantasyleague.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netzwerkswitch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neven.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porscha.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychiatrictreatment.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rainsurveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestatedynamics.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renovacaoimediata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reward-clips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewardface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senecalearning.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senjorentreff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shiva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signaturebrands.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starwarsmusic.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stonediamonds.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swoopfunding.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepartylife.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tipcentral.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trabajosuniversitarioscol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchesaustralia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webrescue.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wetherby.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kindermotorder-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--notenbrse-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zinsstrukturkurve.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10s.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '58as.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anantyaridingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assassin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoscheibenheizung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daane.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deafsports.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'definition.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diskon.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eikosanoide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahrsschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herveybaypestcontrol.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipswichflorist.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istorage.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjblindka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kithomescanberra.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kredit-versicherung-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronleuchte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexusofadelaide.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicinalweed.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoreda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycheekyglowindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydriasis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfantasyleague.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netzwerkswitch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neven.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porscha.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychiatrictreatment.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainsurveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatedynamics.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovacaoimediata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reward-clips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewardface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senecalearning.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senjorentreff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signaturebrands.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starwarsmusic.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonediamonds.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swoopfunding.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepartylife.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipcentral.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trabajosuniversitarioscol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchesaustralia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webrescue.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetherby.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kindermotorder-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--notenbrse-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinsstrukturkurve.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afde0305700000403004830460221009a6fbfd171db6f1c949bb0871525b71c004f0bfe33b059e90638b2965ed5abab022100d67f5dda5c3e1d3d6832612ec6edf2414cf4988c937fd480ca99bc2bbea4271e0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afde030450000040300483046022100e96dafb7125a455f68ebe05ca99adb6c5ba16d1283430fd3047498c68d126ea9022100a3e59ad8415938b1928076b10b20e7ebe7b73688d2546b52c0deade90296ef0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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