beachbag.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:05:26:54:ac:60:1d:7c:4a:dc:ae:8a:b2:9d:12:83:4f:13 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=beachbag.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:05:26:54:ac:60:1d:7c:4a:dc:ae:8a:b2:9d:12:83:4f:13
Serial Number (int): 350201505874611103387572733316056842718995
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 74:2b:71:07:cf:dc:5a:ed:3c:bb:de:fb:98:d7:a9:72:68:73:3f:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 81:4c:a8:08:5f:74:0e:87:18:9b:97:28:3a:00:d6:b3:5f:ce:e7:12
Fingerprint (sha256): 7e:ce:a6:a5:d1:e0:8d:61:34:48:bc:11:6b:fe:71:3d:3a:89:86:5e:ae:49:e1:d7:7c:30:2a:db:2b:ea:c4:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate beachbag.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beachbag.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.8oj.us
*.adultmosaic.com
*.beachbag.com.au
*.begins.net
*.bordeaux.com.au
*.bslegacy.co
*.buildingextensions.com.au
*.cabinetknobs.de
*.cosmeticproducts.com.au
*.dressynew.com
*.dukeen.com.br
*.ecosys.com.au
*.esteembusiness.com.au
*.fibromialgia.de
*.filmovanie-svadby.eu
*.flybyme.co.uk
*.frenchcooking.com.au
*.frlife.co
*.geubhub.co
*.goldcoins.co.za
*.groeber.eu
*.growthstudy.co
*.hichima.com
*.joshwilliams.me
*.justicemaps.com
*.kekering.co
*.kratos.es
*.luxusdusche.de
*.medicalcoverage.de
*.metalbuildings.com.au
*.mystickmoons.com
*.puppenkleiderschrank.de
*.romberg-reisen.de
*.schokoladentorten.de
*.systemreiniger.de
*.ubon3.info
*.weber-syndrom.de
*.weelness.de
*.wiiflix.co
*.xn--anzuchttpfe-yfb.de
*.xn--baubrgschaft-glb.de
*.xn--erdkrten-r4a.de
*.xn--fassadendmmungen-3nb.de
*.xn--hallenkrne-x5a.de
*.xn--hochzeits-glckwnsche-0ecd.de
*.xn--kchenzelt-q9a.de
*.xn--likrherstellung-btb.de
*.xn--silvestersprche-bwb.de
*.xn--vitalkapazitt-mfb.de
*.xn--winterhtte-geb.de
8oj.us
adultmosaic.com
beachbag.com.au
begins.net
bordeaux.com.au
bslegacy.co
buildingextensions.com.au
cabinetknobs.de
cosmeticproducts.com.au
dressynew.com
dukeen.com.br
ecosys.com.au
esteembusiness.com.au
fibromialgia.de
filmovanie-svadby.eu
flybyme.co.uk
frenchcooking.com.au
frlife.co
geubhub.co
goldcoins.co.za
groeber.eu
growthstudy.co
hichima.com
joshwilliams.me
justicemaps.com
kekering.co
kratos.es
luxusdusche.de
medicalcoverage.de
metalbuildings.com.au
mystickmoons.com
puppenkleiderschrank.de
romberg-reisen.de
schokoladentorten.de
systemreiniger.de
ubon3.info
weber-syndrom.de
weelness.de
wiiflix.co
xn--anzuchttpfe-yfb.de
xn--baubrgschaft-glb.de
xn--erdkrten-r4a.de
xn--fassadendmmungen-3nb.de
xn--hallenkrne-x5a.de
xn--hochzeits-glckwnsche-0ecd.de
xn--kchenzelt-q9a.de
xn--likrherstellung-btb.de
xn--silvestersprche-bwb.de
xn--vitalkapazitt-mfb.de
xn--winterhtte-geb.de

Other certificates including the domain name beachbag.com.au

(limited to 100 certificates)
beachbag.com.au
beachbag.com.au
aussievitamins.com.au
beachbag.com.au
beachbag.com.au
beachbag.com.au
goldcoastescapes.com.au
beachbag.com.au
pumpkinvarieties.net

Certificate

The complete raw certificate details for beachbag.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350201505874611103387572733316056842718995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 19:42:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 19:42:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beachbag.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777350439101814919966947521149220624298200878000751248449003380562315460971463450218516908581103048974296971908987933201821777500985980995163102394818177653821983026648663535350538566983969291353467125217576035042276473636255453809682869623812280298963007130187830943556863396592636273531729719900843383509183882606428738205971330281853399742620108389398829729689574863643933471680248307479384947770221133020487838381255006844158094778477312442386437294855672276744395293475229697946920504865405838963776224339084745124990481000998701265081376365959599664488848125244792818741411905907807670573104278294052037166114879116316590183862756389079684807772891553998311133723527722695970540830329439743743180679723703780956873229568442056339336957116030882002374752852557248569914063343125421852549123478993625896129324759839238386893057428748207783046542074705276253471846329445154313196377598728601899588421335524183890694446197312707678364124982630856134335241539511813928757935573192906374047414167864445991514124317930607444117289401075148067617400116794631871600331997890450536617219473623822567351523426634563335187726830222062361751213818973973842829497299770146749471116184945879048811645092040483779138363582354686024309748877641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							742b7107cfdc5aed3cbbdefb98d7a97268733fbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1976 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8oj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultmosaic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beachbag.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.begins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bordeaux.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bslegacy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildingextensions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabinetknobs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmeticproducts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dressynew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dukeen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecosys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esteembusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fibromialgia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmovanie-svadby.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flybyme.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frenchcooking.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frlife.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geubhub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldcoins.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groeber.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growthstudy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hichima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joshwilliams.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justicemaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kekering.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kratos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxusdusche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicalcoverage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metalbuildings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mystickmoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puppenkleiderschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romberg-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schokoladentorten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.systemreiniger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubon3.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weber-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weelness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiiflix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--anzuchttpfe-yfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--baubrgschaft-glb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--erdkrten-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fassadendmmungen-3nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hallenkrne-x5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hochzeits-glckwnsche-0ecd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kchenzelt-q9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--likrherstellung-btb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--silvestersprche-bwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--vitalkapazitt-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--winterhtte-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8oj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultmosaic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachbag.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bordeaux.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bslegacy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingextensions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabinetknobs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmeticproducts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dressynew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukeen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecosys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esteembusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibromialgia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmovanie-svadby.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flybyme.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frenchcooking.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frlife.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geubhub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoins.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groeber.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growthstudy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hichima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joshwilliams.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justicemaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kekering.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kratos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxusdusche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalcoverage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalbuildings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystickmoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puppenkleiderschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romberg-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schokoladentorten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemreiniger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubon3.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weber-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weelness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiiflix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--anzuchttpfe-yfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--baubrgschaft-glb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--erdkrten-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fassadendmmungen-3nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hallenkrne-x5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hochzeits-glckwnsche-0ecd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kchenzelt-q9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--likrherstellung-btb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--silvestersprche-bwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vitalkapazitt-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--winterhtte-geb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f643e2e200000040300483046022100c4b8465287cd0fe9d65d4991a0fc744cb37267670cc3fccad5fa1a340a3e8ee1022100f232544a406a4073dd5fcc73aa4b4518eabe1a9793d12c3270e2de05a27c618200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f643e2e6700000403004830460221008010d7b7061db4c39352697462172f4b7bf51923412f161bae6d0fe8720c2d07022100c121880de78dadf27afe508c7736ec4d807bf67cb3db1b3b42f446ce4d479287
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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