antt.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:c6:2a:35:4a:aa:fe:96:ea:44:07:a2:a4:b1:64:9d:8d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=antt.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:c6:2a:35:4a:aa:fe:96:ea:44:07:a2:a4:b1:64:9d:8d
Serial Number (int): 322510807774645709956509422154528458055053
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:43:a5:f4:c9:6f:44:6c:44:c8:af:f8:85:11:fe:37:cb:a9:8e:eb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:57:7b:6a:be:b2:21:33:e0:95:a6:d8:9c:84:c4:01:1b:4a:ed:44
Fingerprint (sha256): 74:bd:c9:2e:57:5b:c8:c9:31:dc:d1:a7:66:b8:de:81:22:c7:fb:23:f0:90:1d:47:14:01:0f:bb:9e:e0:7d:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate antt.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for antt.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.actingaudition.xyz
*.aktieschoenen.nl
*.almostlisted.info
*.antt.com.br
*.bankruptcyofokc.net
*.carsandcaravans.com.au
*.ccleaner.pw
*.cienciashoje.com.br
*.clothing-store.online
*.coin.marketing
*.courts.icu
*.cov.org
*.dacarsound.com.br
*.discriminationlaw.com.au
*.fantasiasdehalloween.com.br
*.flashporno.de
*.floristen.be
*.friv.pt
*.garruchotapicerias.es
*.gehaltsrechne.de
*.giftsforyourgirlfriends.co.uk
*.girlsclothing.com.au
*.goedkooproken.net
*.intelligenzspiele.de
*.intimatewear.com.au
*.izy.de
*.llg.us
*.my-lagu.tk
*.nakup1.sk
*.personal.media
*.poppersaroma.co.uk
*.radshorts.de
*.rru.ca
*.sampling.com.au
*.sfe5.xyz
*.silikonspritze.de
*.somehow.icu
*.sora-blue.net
*.thelaughingbuddharhyl.co.uk
*.topmodel-bilder.de
*.transfermartk.de
*.uzmusic.net
*.vessels.com.au
*.vukan.site
*.weddingreceptionsgoldcoast.com.au
*.wwwdpma.de
*.wwwmalvorlagen.de
*.wwwvodafone.co.uk
*.xn--naturholzhuser-fib.de
*.zyo.net
actingaudition.xyz
aktieschoenen.nl
almostlisted.info
antt.com.br
bankruptcyofokc.net
carsandcaravans.com.au
ccleaner.pw
cienciashoje.com.br
clothing-store.online
coin.marketing
courts.icu
cov.org
dacarsound.com.br
discriminationlaw.com.au
fantasiasdehalloween.com.br
flashporno.de
floristen.be
friv.pt
garruchotapicerias.es
gehaltsrechne.de
giftsforyourgirlfriends.co.uk
girlsclothing.com.au
goedkooproken.net
intelligenzspiele.de
intimatewear.com.au
izy.de
llg.us
my-lagu.tk
nakup1.sk
personal.media
poppersaroma.co.uk
radshorts.de
rru.ca
sampling.com.au
sfe5.xyz
silikonspritze.de
somehow.icu
sora-blue.net
thelaughingbuddharhyl.co.uk
topmodel-bilder.de
transfermartk.de
uzmusic.net
vessels.com.au
vukan.site
weddingreceptionsgoldcoast.com.au
wwwdpma.de
wwwmalvorlagen.de
wwwvodafone.co.uk
xn--naturholzhuser-fib.de
zyo.net

Other certificates including the domain name antt.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for antt.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322510807774645709956509422154528458055053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 21:51:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 21:51:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'antt.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 979485259059362370778735775837559217009290556474176033956834883644962875317059298271506807113971409513361761753812910888991442333153217856298270514588892468160081691044781687623798898828260044175244844141480075909808668210453182899813952823239184518560265734135981279095263300677405814710522311251147025209437131874115639256919004011744509993073946866558415929118205117431360312805474508237200933306021540625729666276445828877321575235598353987296678878018767361633205521332396310948500108560097870546559059620670985746193718158433537753411438851728540204339821443704850461407201532849741077437406183200659508813347798147073723553513362768436019784473790036183705613268088970018485495089514875776146593159430442410929726568183126129442983967436307055972334427642984325223094579719458314858045682978583624438027458821251094491058435901610988409474281230908858270809556612327678804991518578761366662381155766125262109402069719848058471280169097492583983140879254134468104066417000215089845869045840883470137943492905579490042096183901820415804795320882652412255254175314293092500429645137622190805106015446853636502554890906011228604275660919924194236822265016081437667357209482431816718778865541700624087502389122667815653956789804883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce43a5f4c96f446c44c8aff88511fe37cba98eeb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1858 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actingaudition.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktieschoenen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almostlisted.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankruptcyofokc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carsandcaravans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccleaner.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cienciashoje.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clothing-store.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coin.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courts.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dacarsound.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discriminationlaw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasiasdehalloween.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flashporno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floristen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garruchotapicerias.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gehaltsrechne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giftsforyourgirlfriends.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlsclothing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goedkooproken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelligenzspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intimatewear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.izy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llg.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-lagu.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakup1.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personal.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poppersaroma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radshorts.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rru.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sampling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfe5.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silikonspritze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somehow.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sora-blue.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelaughingbuddharhyl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topmodel-bilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transfermartk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uzmusic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vessels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vukan.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddingreceptionsgoldcoast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdpma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmalvorlagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwvodafone.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--naturholzhuser-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zyo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actingaudition.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktieschoenen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almostlisted.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcyofokc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsandcaravans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccleaner.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cienciashoje.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothing-store.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coin.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courts.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacarsound.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discriminationlaw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasiasdehalloween.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashporno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floristen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garruchotapicerias.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gehaltsrechne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftsforyourgirlfriends.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlsclothing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goedkooproken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligenzspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intimatewear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llg.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-lagu.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakup1.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poppersaroma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radshorts.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rru.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sampling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfe5.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silikonspritze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somehow.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sora-blue.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelaughingbuddharhyl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmodel-bilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfermartk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzmusic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vessels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vukan.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingreceptionsgoldcoast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdpma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmalvorlagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwvodafone.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--naturholzhuser-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d50df18a60000040300483046022100bd82550aa24c989a8c1c448af869c51d0884ba421634db3e6720aba146ad6522022100ca65975a1e13d4ee46f75925fa831df81ec2f9c0d0f664c08d14a4edfe658b3500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d50df18c60000040300483046022100cf0acf65c34378685ce144704189c4112186cf31adac7ec233645c7e4d3d97d2022100e68df948194fc2c0f2e1b24ba51947999724f4943c2531d465275271c5017cc4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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