131.es

Issued by R3

About this certificate

This digital certificate with serial number 03:c9:54:6b:ac:01:e4:f8:fa:48:fa:ed:fa:88:33:b6:4d:c4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=131.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:54:6b:ac:01:e4:f8:fa:48:fa:ed:fa:88:33:b6:4d:c4
Serial Number (int): 329845827762523710824272143192039758384580
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:54:4e:a1:57:96:20:f7:8f:73:09:8f:2b:0f:69:b3:33:cc:9a:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:a6:67:f1:49:d5:53:0d:61:a4:ce:1c:d5:ee:85:aa:ea:16:3d:9a
Fingerprint (sha256): 7d:f2:1f:eb:d7:44:81:94:ad:86:4a:11:19:08:4a:54:2e:31:34:07:1d:f2:09:51:cd:c4:71:71:04:ee:c7:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 131.es

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 131.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.131.es
*.520nyg.com
*.abercombiekids.com
*.aerialplastics.com
*.astar-global.com
*.azconf.com
*.cameratradeincenter.com
*.directfactoryoutlets.com.au
*.ecomputer-help.com
*.eurowngs.de
*.fradiologie.de
*.frauenklamotten.de
*.funtests.de
*.gigabytes.com.au
*.hillsdalehigh.com
*.hoa.be
*.ilbcbs.com
*.immmbilien.de
*.interclinica.com.br
*.jerseyan.us
*.kellysservices.com
*.luluelmon.com
*.marketingstrategy.com.au
*.mrsohouse.com
*.muflorida.com
*.opensource.com.au
*.outfittrey.de
*.rcisd.com
*.reiseorganizer.de
*.reishi.com.au
*.schlauchkajak.de
*.securedcreditcard.com.au
*.shoots.com.au
*.singleholidays.com.au
*.solarschlauch.de
*.spikesandstuds.com
*.students-hagenberg.at
*.supportavg.com
*.sydneydjs.com.au
*.trailbalzerhealth.com
*.vabar.org
*.vendidoalas3.com.mx
*.woodencrates.com.au
*.wordreference.com.br
*.wwwbenenden.co.uk
*.xn--trffelbutter-elb.de
*.xn--vorwerkhhner-klb.de
*.xn--wortbersetzung-jsb.de
*.xn--wstemrot-65a.de
*.xygular.com
131.es
520nyg.com
abercombiekids.com
aerialplastics.com
astar-global.com
azconf.com
cameratradeincenter.com
directfactoryoutlets.com.au
ecomputer-help.com
eurowngs.de
fradiologie.de
frauenklamotten.de
funtests.de
gigabytes.com.au
hillsdalehigh.com
hoa.be
ilbcbs.com
immmbilien.de
interclinica.com.br
jerseyan.us
kellysservices.com
luluelmon.com
marketingstrategy.com.au
mrsohouse.com
muflorida.com
opensource.com.au
outfittrey.de
rcisd.com
reiseorganizer.de
reishi.com.au
schlauchkajak.de
securedcreditcard.com.au
shoots.com.au
singleholidays.com.au
solarschlauch.de
spikesandstuds.com
students-hagenberg.at
supportavg.com
sydneydjs.com.au
trailbalzerhealth.com
vabar.org
vendidoalas3.com.mx
woodencrates.com.au
wordreference.com.br
wwwbenenden.co.uk
xn--trffelbutter-elb.de
xn--vorwerkhhner-klb.de
xn--wortbersetzung-jsb.de
xn--wstemrot-65a.de
xygular.com

Other certificates including the domain name 131.es

(limited to 100 certificates)
131.es
131.es
131.es
131.es
131.es
fundraisers.com.au
131.es
131.es
131.es
commodityprice.com.au
131.es
131.es
praying.com.au

Certificate

The complete raw certificate details for 131.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329845827762523710824272143192039758384580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 20:12:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 20:12:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '131.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765607905614081155228624191426997120497280270653290006894657008965360259492617493063682365563428356228381550814566247738796706558022626786839926742090760939913486348228330334859464833882077869339344723605622203801838174133075142096813531809619783711497740494144518340027754100610357312614559616677055415908154125339643633717494155001471499241101646996570556161621363786266697230791570085683349972446280259197519145230805526980642884191281421262903379103800043193132307868650096250632850195334699922123005981528092407847111679778421093806408621540033460863565716463436719703729025779217808942096124298409631131532259264719414141586177062687428725038066015929363996506261037084138651700653670040558457398139351862983209210624245044759710968589541852323722238811818275404138870181305899838720464619222954062645141316510757805221000476406045296571530674141954332497611853497447958368572330348748526536496862483765934578845355483868824618328067811777718117261118081207098586063815193049856529652366889344187221188776450020859376430159360990608560618298718045676776255830646733863343670286953673103324183418267084656846233960585584282734316498560457551873229416091858213833992109420620226549891804298457562188291069570554459971814038859079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22544ea1579620f78f73098f2b0f69b333cc9a5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.131.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.520nyg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abercombiekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerialplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astar-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azconf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cameratradeincenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directfactoryoutlets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecomputer-help.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurowngs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fradiologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frauenklamotten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funtests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigabytes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hillsdalehigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilbcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immmbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interclinica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerseyan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kellysservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luluelmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketingstrategy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrsohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opensource.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outfittrey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reiseorganizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reishi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlauchkajak.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securedcreditcard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoots.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.singleholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarschlauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spikesandstuds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.students-hagenberg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supportavg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydneydjs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trailbalzerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vabar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vendidoalas3.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodencrates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordreference.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbenenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--trffelbutter-elb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--vorwerkhhner-klb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wortbersetzung-jsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wstemrot-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xygular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '520nyg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abercombiekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerialplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astar-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azconf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameratradeincenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directfactoryoutlets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecomputer-help.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurowngs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fradiologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frauenklamotten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funtests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigabytes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillsdalehigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilbcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immmbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interclinica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellysservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luluelmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingstrategy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensource.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outfittrey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reiseorganizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reishi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlauchkajak.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedcreditcard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoots.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singleholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarschlauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spikesandstuds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students-hagenberg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportavg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneydjs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trailbalzerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vabar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendidoalas3.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodencrates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordreference.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbenenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--trffelbutter-elb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vorwerkhhner-klb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wortbersetzung-jsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wstemrot-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xygular.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185a7d3ef30000004030047304502206b5d5c4c47cf2177de2c16190fd43c6d34530113a5453578323bc674ecd9bba4022100ddb6ec994983f4cab76b7d4e10ec94d54db3984b165153d352a1c58dbf320100007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185a7d3f1040000040300483046022100c2d51275a62c5e3482c0faae174449ee585a68063ad8009ef00a032e7f3eb3b2022100bf35ba9373b801fd6bd17af0b2b74e2da973e14f254cc95d6b58ffe1c35826da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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