www.k3-sportmanagement.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:70:f7:14:07:48:9b:c0:18:33:96:72:ae:e2:b8:ba:18 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.k3-sportmanagement.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:70:f7:14:07:48:9b:c0:18:33:96:72:ae:e2:b8:ba:18
Serial Number (int): 312189086905577800098087228246225067751960
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:52:89:d6:f9:53:02:b1:9f:b8:1e:4f:8e:0c:c5:82:3d:0d:d3:fc
Fingerprint (sha256): 76:4c:c5:e9:7d:ef:7d:3e:c6:b2:ed:73:75:fd:0c:f8:4d:47:7a:ec:b5:0e:84:ec:83:18:ec:2f:aa:fc:25:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.k3-sportmanagement.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.k3-sportmanagement.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.downit.app
acton.spring.so
adentistacientista.com.br
akwentis.us
alam-eltakieef.com
alipay.qps.io
api.1.prod.accentra.env.flexearn.com
app.getaround.com
app.transparencia.io
app.turnfoot.io
ativaimoveis-sp.com.br
auth.strawberrypunch.com
bachleague.com
bankwakacji.pl
blog.tilfin.net
bookshelf.northernlights.io
casadocanto.pt
console.bobpoom.com
console.parkchamp.ca
console.portal.brewce.chat
contest.design.spacetalk.co.kr
corasoft.net
cp.avs-valuation.com
dash.gradpad.us
dataset.or.kr
delanalytics.io
dev.jhtb.us
docenqrypt.com
dtrung.ga
eatism.site
examlander.com
fax.keve.ren
fisioterapiaformiga.com.br
fredericbruniquel.com
fsr.my.id
geoseekergame.com
gl-ph.com
hal-cg.com
hidemessage.me
kdilandscaping.com
kibbcom.com
leadertrip.org
marcinwiera.pl
metka.cc
naamcreations.in
objectivetalent.com
ondra.unextro.net
open.turnout.app
paalok.com
pib.iostechtools.com
pietyhill.org
prod.pikitech.co.nz
pushyy.io
pwa.znapzcloud.ml
receipt.int.bilalmasjid.co.uk
renture.co
sequenceapp.co
snake.lovef.se
stage.storyplacestudio.com
test.myarkeo.com
tetory.buildman.co.jp
ussd.bluerobot.com
washpeople.co.kr
willeverett.co
www.abslogs.com
www.accompanyu.com
www.addble.com
www.aegeantaxi.com
www.alam-eltakieef.com
www.albercode.es
www.app.powtorkazpolskiego.pl
www.app2.powtorkazpolskiego.pl
www.ativaimoveis-sp.com.br
www.auyea.com.au
www.awa.re
www.bachleague.com
www.belegit.in
www.beyondpar.org
www.bigpartsales.com
www.blinelive.com
www.carson-newton.me
www.diceroll.online
www.digitalstrategy.institute
www.diljitvj.in
www.dkgadchandur.in
www.event-sourcing.com
www.examlander.com
www.foodzombie.com.my
www.haui.co.uk
www.hidemessage.me
www.jeremyforsythe.com
www.k3-sportmanagement.de
www.menez.io
www.meulivro.app
www.naamcreations.in
www.ngomecloud.com
www.ste.red
www.swoopshops.co
www.whatsport.co
www.willeverett.co

Other certificates including the domain name k3-sportmanagement.de

(limited to 100 certificates)
admin.fanimals.co.nz
trudeaua.ca
trudeaua.ca
www.kpassociates.co
pavci.yanfoma.net
elleven.minhacentralonline.com.br
console.bobpoom.com
plumasense.com
www.kpassociates.co
app.busright.com
boxd.app
www.diegosommer.com.br
www.k3-sportmanagement.de
www.k3-sportmanagement.de
staging.modera.app
plumasense.com
staging.activerecall.com
twishirts.com
admin.fanimals.co.nz
www.creditocomigo.com.br
staging.activerecall.com
console.bobpoom.com
k3-sportmanagement.de
test.4tuna.io
socialreacts.com
staging.modera.app
k3-sportmanagement.de
links.liteflow.com
taitale.app
hearvet.co.jp
links.liteflow.com
www.diegosommer.com.br

Certificate

The complete raw certificate details for www.k3-sportmanagement.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312189086905577800098087228246225067751960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 21:22:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 21:22:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.k3-sportmanagement.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1938 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.downit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acton.spring.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adentistacientista.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akwentis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alam-eltakieef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alipay.qps.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.1.prod.accentra.env.flexearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getaround.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.transparencia.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.turnfoot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ativaimoveis-sp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.strawberrypunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankwakacji.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.tilfin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookshelf.northernlights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casadocanto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.bobpoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.parkchamp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.portal.brewce.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contest.design.spacetalk.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.avs-valuation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.gradpad.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataset.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delanalytics.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.jhtb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docenqrypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtrung.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatism.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examlander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fax.keve.ren'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisioterapiaformiga.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredericbruniquel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsr.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoseekergame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gl-ph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hal-cg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hidemessage.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdilandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibbcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadertrip.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcinwiera.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metka.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naamcreations.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'objectivetalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondra.unextro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.turnout.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paalok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pib.iostechtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pietyhill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pikitech.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushyy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwa.znapzcloud.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receipt.int.bilalmasjid.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renture.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequenceapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snake.lovef.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.storyplacestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.myarkeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tetory.buildman.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussd.bluerobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washpeople.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willeverett.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abslogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accompanyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.addble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegeantaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alam-eltakieef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albercode.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.powtorkazpolskiego.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app2.powtorkazpolskiego.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ativaimoveis-sp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auyea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awa.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belegit.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondpar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigpartsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blinelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carson-newton.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diceroll.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalstrategy.institute'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diljitvj.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dkgadchandur.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.event-sourcing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.examlander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodzombie.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haui.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hidemessage.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeremyforsythe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k3-sportmanagement.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menez.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meulivro.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naamcreations.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngomecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ste.red'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swoopshops.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatsport.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willeverett.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170bc3e6ebe0000040300483046022100f2a6ccbdda6bb7b3834f93dd1eb3ba12d38e0aa7fabb7f606c255cc320786183022100ba065a27a35d7b51125dd328339d328289e9db15bafc23c8223d6b6ab71fcbdb00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170bc3e70370000040300483046022100fbf21cc9e2142202b3e9994134baa8f6cbc3d21106b106cc0e004190a79fb46f02210094e968070d75819c50928f4eac0050f41b330dee534aec5814ff9929c031d34b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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