flyinghirsch.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:54:b2:6b:6f:30:34:9b:f4:ee:aa:2c:04:13:49:dd:76 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flyinghirsch.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:54:b2:6b:6f:30:34:9b:f4:ee:aa:2c:04:13:49:dd:76
Serial Number (int): 341415795581215103497317658840032027991414
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:73:6e:47:40:f4:f8:2c:65:91:25:e8:60:45:74:e7:0c:e3:9a:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:97:d1:38:0d:4f:7f:2b:4d:57:b3:64:0d:6b:d9:ee:81:8d:c5:2e
Fingerprint (sha256): 86:91:ef:73:55:0d:4a:ce:02:5e:ba:8e:33:52:c8:f1:87:bd:1b:f7:49:10:91:ea:f4:74:40:79:d2:f3:ab:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flyinghirsch.ch

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flyinghirsch.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12hp.ch
2ix.de
abizeitung-marienstatt-2018.lima-city.de
adoras.de
album.rho2.eu
allesanders.2ix.de
allesanders.lima-city.de
analytics.tvnschwimmen.de
bladeout.4lima.de
blog.alternative-gesundheitsmesse-brandenburg.de
blog.marcfischer.org
caismedia.de
christian-brueck.de
citykebab-eching.de
crazyab.lima-city.de
disvoo.com
dsl-aktion.de
equestrian-horses.lima-city.de
etrotti.com
fc-torpedo.lima-city.de
financemind.de
finca-la-pasion.com
flyinghirsch.ch
forums.computergott.eu
frunzke.lima-city.de
fumasu89.lima-city.de
gosenergy.lima-city.de
gykxriyczizpper.lima-city.eu
handyvertrag-preisvergleich.de
hanspeter59.lima-city.de
hebammeeva-maria.lima-city.de
herz-blut.lima-city.de
hotelgarni.lima-city.de
hunde-nachhilfe.de
kae-schulchor.be
luftburg.lima-city.de
macrofan.lima-city.de
marenwolf.lima-city.de
mp3-c.de
mrzq.lima-city.de
muscovy.12hp.de
my-windelshop.de
nepidd.lima-city.de
pb-paulus.de
rz2019.lima-city.de
saeedj870.lima-city.de
sahand.lima-city.de
schnuggu.lima-city.de
seegraphics.de
snakebyte.lima-city.de
soshausgeraete.lima-city.de
stanakatic.lima-city.de
teamapex.lima-city.de
tg-dingelheim.lima-city.de
usagowest.de
volibot.com
volvo4life.ch
wanderelstra.de.cool
wandern-elstra.de.cool
weihnachtenwirdmega.de
wintex.lima-city.de
www.basketball-landshut.lima-city.de
www.chatandfun.lima-city.de
www.deluxe.shoes
www.diemodulbauer.2ix.at
www.equestrian-horses.lima-city.de
www.ff-rethwischfeld8.lima-city.de
www.fleckvieh-salzburg.lima-city.de
www.frunzke.lima-city.de
www.healyourinnerchilds.com
www.hebammeeva-maria.lima-city.de
www.kcn-ev.lima-city.de
www.marcelhartmann-photography.de
www.millmotion.lima-city.de
www.minasmidgard.lima-city.de
www.muscovy.12hp.de
www.musikschule-gratwein.lima-city.de
www.prager-bodenstein.at
www.primaximaging.lima-city.de
www.rent-a-car.lima-city.de
www.rms58.lima-city.de
www.rsplus-bks.lima-city.de
www.sinnloseknoepfe.4lima.de
www.smweb.lima-city.de
www.tct.lima-city.de
www.wanderelstra.de.cool
www.wandern-elstra.de.cool
www.wpfbasel.lima-city.de
www.zweirad-tertel-historie.lima-city.de
xcrynihrsmiarbe.immo-look.de

Other certificates including the domain name flyinghirsch.ch

(limited to 100 certificates)
sni100988.cloudflaressl.com
www.xtatic.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
akhpwdikycsdnb.tjark.pro
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
nate.moinalex.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
www.bhkw.norbertd.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
www.flyinghirsch.ch
www.markusschneider.lima-city.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
zweisteinle.4lima.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
secretfilms.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
alt.zirkus-arcobaleno.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
usagowest.de
*.life-inspiration.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
www.flyinghirsch.ch
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
andreamatthews.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
www.flyinghirsch.ch
sni100988.cloudflaressl.com
*.epf.lv
*.mullis.de
sni100988.cloudflaressl.com
sirania2.lima-city.de
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com
sni100988.cloudflaressl.com

Certificate

The complete raw certificate details for flyinghirsch.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINxjCCDK6gAwIBAgISA+tUsmtvMDSb9O6qLAQTSd12MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMjYxMjE3NTVaFw0y
MDA2MjQxMjE3NTVaMBoxGDAWBgNVBAMTD2ZseWluZ2hpcnNjaC5jaDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMItfv6hKbmNAmiKB0RUXPSrMSxU+z//
VDn0/+wiDYqBdCW77K773emy6xafkgfEKEQEIykpwVgNkLJqilkq+LxFhpKLRhhP
w1L8SzaPzl8ovv6BMU+CiO/FRjNK9uvnM+LYGucPPT7hjd6IHYVlkkDOal7jwF+I
EgzqIdqPehBbx4XPLk8LZfGm3QCg8USqkWPkmIoBujrQOGGDbEm5FjEM+pudOM2b
HOuRPiqmcrE7NYOWzEMo3raFoAIX1ezhnoDmicu3X1DbCo6x3f1HZQjSzuhBxO7t
yUVqVMuecXTZwtVXN4geZx8lladDOCUEPPu+JbvX/CZ/X4F02xxR110CAwEAAaOC
CtQwggrQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQURnNuR0D0+CxlkSXoYEV05wzj
mp8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCCIkGA1UdEQSCCIAwggh8ggcxMmhwLmNoggYyaXguZGWCKGFiaXplaXR1
bmctbWFyaWVuc3RhdHQtMjAxOC5saW1hLWNpdHkuZGWCCWFkb3Jhcy5kZYINYWxi
dW0ucmhvMi5ldYISYWxsZXNhbmRlcnMuMml4LmRlghhhbGxlc2FuZGVycy5saW1h
LWNpdHkuZGWCGWFuYWx5dGljcy50dm5zY2h3aW1tZW4uZGWCEWJsYWRlb3V0LjRs
aW1hLmRlgjBibG9nLmFsdGVybmF0aXZlLWdlc3VuZGhlaXRzbWVzc2UtYnJhbmRl
bmJ1cmcuZGWCFGJsb2cubWFyY2Zpc2NoZXIub3JnggxjYWlzbWVkaWEuZGWCE2No
cmlzdGlhbi1icnVlY2suZGWCE2NpdHlrZWJhYi1lY2hpbmcuZGWCFGNyYXp5YWIu
bGltYS1jaXR5LmRlggpkaXN2b28uY29tgg1kc2wtYWt0aW9uLmRlgh5lcXVlc3Ry
aWFuLWhvcnNlcy5saW1hLWNpdHkuZGWCC2V0cm90dGkuY29tghdmYy10b3JwZWRv
LmxpbWEtY2l0eS5kZYIOZmluYW5jZW1pbmQuZGWCE2ZpbmNhLWxhLXBhc2lvbi5j
b22CD2ZseWluZ2hpcnNjaC5jaIIWZm9ydW1zLmNvbXB1dGVyZ290dC5ldYIUZnJ1
bnprZS5saW1hLWNpdHkuZGWCFWZ1bWFzdTg5LmxpbWEtY2l0eS5kZYIWZ29zZW5l
cmd5LmxpbWEtY2l0eS5kZYIcZ3lreHJpeWN6aXpwcGVyLmxpbWEtY2l0eS5ldYIe
aGFuZHl2ZXJ0cmFnLXByZWlzdmVyZ2xlaWNoLmRlghhoYW5zcGV0ZXI1OS5saW1h
LWNpdHkuZGWCHWhlYmFtbWVldmEtbWFyaWEubGltYS1jaXR5LmRlghZoZXJ6LWJs
dXQubGltYS1jaXR5LmRlghdob3RlbGdhcm5pLmxpbWEtY2l0eS5kZYISaHVuZGUt
bmFjaGhpbGZlLmRlghBrYWUtc2NodWxjaG9yLmJlghVsdWZ0YnVyZy5saW1hLWNp
dHkuZGWCFW1hY3JvZmFuLmxpbWEtY2l0eS5kZYIWbWFyZW53b2xmLmxpbWEtY2l0
eS5kZYIIbXAzLWMuZGWCEW1yenEubGltYS1jaXR5LmRlgg9tdXNjb3Z5LjEyaHAu
ZGWCEG15LXdpbmRlbHNob3AuZGWCE25lcGlkZC5saW1hLWNpdHkuZGWCDHBiLXBh
dWx1cy5kZYITcnoyMDE5LmxpbWEtY2l0eS5kZYIWc2FlZWRqODcwLmxpbWEtY2l0
eS5kZYITc2FoYW5kLmxpbWEtY2l0eS5kZYIVc2NobnVnZ3UubGltYS1jaXR5LmRl
gg5zZWVncmFwaGljcy5kZYIWc25ha2VieXRlLmxpbWEtY2l0eS5kZYIbc29zaGF1
c2dlcmFldGUubGltYS1jaXR5LmRlghdzdGFuYWthdGljLmxpbWEtY2l0eS5kZYIV
dGVhbWFwZXgubGltYS1jaXR5LmRlghp0Zy1kaW5nZWxoZWltLmxpbWEtY2l0eS5k
ZYIMdXNhZ293ZXN0LmRlggt2b2xpYm90LmNvbYINdm9sdm80bGlmZS5jaIIUd2Fu
ZGVyZWxzdHJhLmRlLmNvb2yCFndhbmRlcm4tZWxzdHJhLmRlLmNvb2yCFndlaWhu
YWNodGVud2lyZG1lZ2EuZGWCE3dpbnRleC5saW1hLWNpdHkuZGWCJHd3dy5iYXNr
ZXRiYWxsLWxhbmRzaHV0LmxpbWEtY2l0eS5kZYIbd3d3LmNoYXRhbmRmdW4ubGlt
YS1jaXR5LmRlghB3d3cuZGVsdXhlLnNob2Vzghh3d3cuZGllbW9kdWxiYXVlci4y
aXguYXSCInd3dy5lcXVlc3RyaWFuLWhvcnNlcy5saW1hLWNpdHkuZGWCInd3dy5m
Zi1yZXRod2lzY2hmZWxkOC5saW1hLWNpdHkuZGWCI3d3dy5mbGVja3ZpZWgtc2Fs
emJ1cmcubGltYS1jaXR5LmRlghh3d3cuZnJ1bnprZS5saW1hLWNpdHkuZGWCG3d3
dy5oZWFseW91cmlubmVyY2hpbGRzLmNvbYIhd3d3LmhlYmFtbWVldmEtbWFyaWEu
bGltYS1jaXR5LmRlghd3d3cua2NuLWV2LmxpbWEtY2l0eS5kZYIhd3d3Lm1hcmNl
bGhhcnRtYW5uLXBob3RvZ3JhcGh5LmRlght3d3cubWlsbG1vdGlvbi5saW1hLWNp
dHkuZGWCHXd3dy5taW5hc21pZGdhcmQubGltYS1jaXR5LmRlghN3d3cubXVzY292
eS4xMmhwLmRlgiV3d3cubXVzaWtzY2h1bGUtZ3JhdHdlaW4ubGltYS1jaXR5LmRl
ghh3d3cucHJhZ2VyLWJvZGVuc3RlaW4uYXSCHnd3dy5wcmltYXhpbWFnaW5nLmxp
bWEtY2l0eS5kZYIbd3d3LnJlbnQtYS1jYXIubGltYS1jaXR5LmRlghZ3d3cucm1z
NTgubGltYS1jaXR5LmRlght3d3cucnNwbHVzLWJrcy5saW1hLWNpdHkuZGWCHHd3
dy5zaW5ubG9zZWtub2VwZmUuNGxpbWEuZGWCFnd3dy5zbXdlYi5saW1hLWNpdHku
ZGWCFHd3dy50Y3QubGltYS1jaXR5LmRlghh3d3cud2FuZGVyZWxzdHJhLmRlLmNv
b2yCGnd3dy53YW5kZXJuLWVsc3RyYS5kZS5jb29sghl3d3cud3BmYmFzZWwubGlt
YS1jaXR5LmRlgih3d3cuendlaXJhZC10ZXJ0ZWwtaGlzdG9yaWUubGltYS1jaXR5
LmRlghx4Y3J5bmlocnNtaWFyYmUuaW1tby1sb29rLmRlMEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAsh4FzIui
zYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFxFv35LQAABAMARzBFAiAeGrf5
CTKAMktkgRlu2aXscuQ7dT/GMKhqAA3h48ZVPAIhAITIQWw0l7Znngxp4ihcB8e0
tvw05buHr5lnyU4d0DRLAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3
2RMAAAFxFv35YgAABAMARjBEAiBiQwwhLmBdj8aI7Ch4Xvl3+MPB8QCW3Im+dc3v
faUtGgIgYUg5M2VGRREdhXReoF5AzZAJDF35qLDcPaKIEB6e3AIwDQYJKoZIhvcN
AQELBQADggEBAIZXSXtSPpRCTPgMbyw7iDTCieyRyxaIjs0mX8q589eoXUtClPQx
xWrHTAdcxr5JfBM8Ln0eMZ/jokki72GOODNGVk81dP5OpGsg+RyY3VrhjDJCUvuC
iXxEMrW4dViUgKyknekcxVzG89pCgbbwNQA4ys6l+pNnc1ZYs0fUUvE1IvWy3vko
wel8zi01OLE3FU3QnSuAmDrudiYl5khQce0W0kBh/OEja49vgtE9R50j1+lLry35
VWkaiJMJNJi6vFZN/SF14gashKX5MTgqocw8wRYYsu8P5L/SC7YXGRlWNToL4kJe
kq5XFpucXoB2xcClwa/YA8eZgMNqJCbzgOw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi1+/qEpuY0CaIoHRFRc
9KsxLFT7P/9UOfT/7CINioF0Jbvsrvvd6bLrFp+SB8QoRAQjKSnBWA2QsmqKWSr4
vEWGkotGGE/DUvxLNo/OXyi+/oExT4KI78VGM0r26+cz4tga5w89PuGN3ogdhWWS
QM5qXuPAX4gSDOoh2o96EFvHhc8uTwtl8abdAKDxRKqRY+SYigG6OtA4YYNsSbkW
MQz6m504zZsc65E+KqZysTs1g5bMQyjetoWgAhfV7OGegOaJy7dfUNsKjrHd/Udl
CNLO6EHE7u3JRWpUy55xdNnC1Vc3iB5nHyWVp0M4JQQ8+74lu9f8Jn9fgXTbHFHX
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341415795581215103497317658840032027991414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 12:17:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 12:17:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flyinghirsch.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24512666113094054838692617291399751731024852997485929937079197005712263613779895289593072477703591521361443199148421297009442437129662820602077329184021194458298062159372731132801575547173255175423865477601329451537851401234660410976702179657695493703156938551515548657652679473720287357228906088322391493654503499659237188387072365927580478785169059777483594272638431430508548311789911933710658308026009090817655559322809148959214931288989731670018025358505665510002396320269135166195493303019767308585560989325263979781044178709551945913438232211315975023219862525305917024545460885109836951525459854829327192545117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46736e4740f4f82c659125e8604574e70ce39a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12hp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2ix.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abizeitung-marienstatt-2018.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adoras.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'album.rho2.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allesanders.2ix.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allesanders.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.tvnschwimmen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bladeout.4lima.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.alternative-gesundheitsmesse-brandenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.marcfischer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caismedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christian-brueck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citykebab-eching.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazyab.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disvoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsl-aktion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equestrian-horses.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etrotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fc-torpedo.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financemind.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finca-la-pasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyinghirsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.computergott.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frunzke.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fumasu89.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosenergy.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gykxriyczizpper.lima-city.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyvertrag-preisvergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanspeter59.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hebammeeva-maria.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herz-blut.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelgarni.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunde-nachhilfe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kae-schulchor.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luftburg.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrofan.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marenwolf.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp3-c.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrzq.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muscovy.12hp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-windelshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nepidd.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pb-paulus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rz2019.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saeedj870.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahand.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schnuggu.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seegraphics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snakebyte.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soshausgeraete.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanakatic.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamapex.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tg-dingelheim.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usagowest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volibot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvo4life.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanderelstra.de.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandern-elstra.de.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weihnachtenwirdmega.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintex.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketball-landshut.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chatandfun.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deluxe.shoes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diemodulbauer.2ix.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equestrian-horses.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ff-rethwischfeld8.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fleckvieh-salzburg.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frunzke.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healyourinnerchilds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hebammeeva-maria.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcn-ev.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcelhartmann-photography.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millmotion.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minasmidgard.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muscovy.12hp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musikschule-gratwein.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prager-bodenstein.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primaximaging.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rent-a-car.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rms58.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsplus-bks.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinnloseknoepfe.4lima.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smweb.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tct.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanderelstra.de.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wandern-elstra.de.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpfbasel.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zweirad-tertel-historie.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcrynihrsmiarbe.immo-look.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017116fdf92d000004030047304502201e1ab7f9093280324b6481196ed9a5ec72e43b753fc630a86a000de1e3c6553c02210084c8416c3497b6679e0c69e2285c07c7b4b6fc34e5bb87af9967c94e1dd0344b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017116fdf9620000040300463044022062430c212e605d8fc688ec28785ef977f8c3c1f10096dc89be75cdef7da52d1a022061483933654645111d85745ea05e40cd90090c5df9a8b0dc3da288101e9edc02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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