kayacan.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4a:1f:06:67:1d:f0:46:59:b5:61:58:d2:52:9d:c4:81:52 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kayacan.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4a:1f:06:67:1d:f0:46:59:b5:61:58:d2:52:9d:c4:81:52
Serial Number (int): 373671278192301083823647815699655754547538
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:83:8b:14:74:0e:4b:b8:27:b8:26:48:23:77:ec:5b:2e:05:ac:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:4d:3e:dc:5f:0b:a8:39:2c:77:e7:e4:b8:7d:83:e7:26:fa:82:41
Fingerprint (sha256): 64:9e:78:7f:fb:45:3a:8d:82:df:eb:63:ab:84:50:a0:25:f4:12:49:62:ca:4e:1a:82:e1:66:68:f4:61:57:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kayacan.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kayacan.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adiguzel.com
*.agissons.com
*.araripe.com
*.arbeidsdeskundige.com
*.arkitekthuset.com
*.berkovits.com
*.bhambri.com
*.burakdemir.com
*.carabisnis.com
*.catalyseur.com
*.cofrinho.com
*.cvjecara.com
*.cvketel.com
*.efekty.com
*.enelclavo.com
*.facilitando.com
*.gerechtsdeurwaarder.com
*.grigoletto.com
*.hartkirchen.com
*.heards.com
*.hetkoetshuis.com
*.himukai.com
*.igrejadecristo.com
*.ilcondominio.com
*.kappou.com
*.kayacan.com
*.kiropraktorklinik.com
*.maioka.com
*.meinwunsch.com
*.mertesdorf.com
*.migueles.com
*.muvesz.com
*.ploeg.com
*.popcornmaschine.com
*.rimbau.com
*.risicoverzekering.com
*.ryukei.com
*.sague.com
*.samaju.com
*.schierbaum.com
*.schralp.com
*.schulkind.com
*.shbang.com
*.shohishakinyu.com
*.sotaque.com
*.tevys.com
*.theswirl.com
*.vaclavik.com
*.vanassendelft.com
*.zerodechet.com
adiguzel.com
agissons.com
araripe.com
arbeidsdeskundige.com
arkitekthuset.com
berkovits.com
bhambri.com
burakdemir.com
carabisnis.com
catalyseur.com
cofrinho.com
cvjecara.com
cvketel.com
efekty.com
enelclavo.com
facilitando.com
gerechtsdeurwaarder.com
grigoletto.com
hartkirchen.com
heards.com
hetkoetshuis.com
himukai.com
igrejadecristo.com
ilcondominio.com
kappou.com
kayacan.com
kiropraktorklinik.com
maioka.com
meinwunsch.com
mertesdorf.com
migueles.com
muvesz.com
ploeg.com
popcornmaschine.com
rimbau.com
risicoverzekering.com
ryukei.com
sague.com
samaju.com
schierbaum.com
schralp.com
schulkind.com
shbang.com
shohishakinyu.com
sotaque.com
tevys.com
theswirl.com
vaclavik.com
vanassendelft.com
zerodechet.com

Other certificates including the domain name kayacan.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kayacan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373671278192301083823647815699655754547538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 05:43:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 05:43:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kayacan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731083087208653925233132709183849517777350910640264754515289709730390607078270336086378184507064743648223912084434399637053393703142345293176638218550801285408234778669184428936821074876932809771622566327338595163627523506570508734354890957039564053931704962532042882958546650788748129370043871327192907921001835315695577975978619566252285980110653874394877359119520225705065556593542831869055356470334530047451990327931060417454154733479684451913732116477603538416220174277780870365191342734252975916104280620380337391156835718373581832126200240557492389179667507751846281689203883280193970612954974451978202973837511068757946465920269262366732227551349835165419162333557546787102836170748234870123977087513849789476724519798980786946823428710877982711348314352886271294350739490699692148507632715695039309538779375200044778998323056454482330143117476015849136700335740769764370361674610809406555734871037127635668206107558070966422661052680297856669491591676002977480329577684779914841722407380691991350129870584664410002839389516014685384783733701975839163581498706763043595265751173073902151709344163167789924542469388217894658732403167883860673867685385413637012002283366004001957303326767639142987599222566113843734576871361213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e838b14740e4bb827b826482377ec5b2e05ac74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1634 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adiguzel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.araripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbeidsdeskundige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkitekthuset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berkovits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhambri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burakdemir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carabisnis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalyseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cofrinho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvjecara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvketel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efekty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enelclavo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facilitando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gerechtsdeurwaarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grigoletto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartkirchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hetkoetshuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.himukai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igrejadecristo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilcondominio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kappou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kayacan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiropraktorklinik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maioka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meinwunsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mertesdorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migueles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muvesz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ploeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popcornmaschine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rimbau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risicoverzekering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryukei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samaju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schierbaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schralp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schulkind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shohishakinyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sotaque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tevys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theswirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaclavik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanassendelft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zerodechet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adiguzel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'araripe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbeidsdeskundige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkitekthuset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkovits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhambri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burakdemir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carabisnis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalyseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofrinho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvjecara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvketel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efekty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enelclavo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilitando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerechtsdeurwaarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grigoletto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartkirchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hetkoetshuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'himukai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igrejadecristo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilcondominio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kappou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kayacan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiropraktorklinik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maioka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinwunsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mertesdorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migueles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muvesz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ploeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popcornmaschine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rimbau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risicoverzekering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryukei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samaju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schierbaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schralp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schulkind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shohishakinyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotaque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tevys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theswirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaclavik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanassendelft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerodechet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e49c0fe780000040300473045022073e0903165d5a26845203007c66cbb0e599d18d95923529b8b5e27748df7fdf3022100fdf27826d2bdbcabd1da27c1cde3df5f4519222aed322b5205cc3ab91a5cfe5f007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e49c0fe730000040300483046022100c2140b0ca3fb139f43c8ae4adbc39334ffe2f463b942bb50b1261629b2c3760c022100ebd90262fd47fe2569330bc38a0fd2615b9c1814a0da593a4f0dbccb8035aced
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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