xn--6-1ga.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:16:b6:07:d0:e4:f2:14:81:fb:d0:8a:e6:68:15:f0:2c was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xn--6-1ga.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:16:b6:07:d0:e4:f2:14:81:fb:d0:8a:e6:68:15:f0:2c
Serial Number (int): 278040881946869426405070723978952449585196
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:c6:b7:1d:a2:e9:19:98:74:37:31:5b:97:8c:66:fc:45:06:5b:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:a0:04:bb:e0:20:ec:96:6d:87:10:46:87:ab:39:23:8d:07:eb:94
Fingerprint (sha256): 8e:a1:49:c0:8f:06:1b:78:9c:90:f7:0c:bb:5d:e0:3f:08:a0:ee:1a:db:70:9a:5a:24:02:48:b1:bf:a9:4c:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate xn--6-1ga.at

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--6-1ga.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0yd.net
2dna.net
9h.at
a48.net
amoremail.net
andrewbernard.net
antibiotic.net
applicationmarketing.net
arduinoenigma.net
astrologywizard.net
astronautical.net
beachwedding.net
behavioralfinance.net
brightwave.net
buycell.net
cabinlife.net
chaitea.net
cheeselam.net
collegeapparel.net
commercialistavenezia.net
comsysdesign.net
continuing.net
cottagelife.net
crisisactionplan.net
dakotastream.net
dejorden.net
designerdomain.net
dewd.net
disposophobia.net
disputech.net
domacon.net
domainmarketplace.net
duiautoinsurance.net
duluthmn.net
ezm.net
faqaboutreligion.net
faqgod.net
faqreligion.net
fatherflanagan.net
fetishdating.net
fflsd.net
foreclosurese.net
framegrid.net
fresnoca.net
frflanagan.net
glennherman.net
gmhd.net
gutrad.at
hairclosure.net
healthfine.net
healthsound.net
homesweetschool.net
inteen.net
israelpaintandhardware.net
jamiekirchick.net
junglegym.net
kingofsoul.net
knec.net
knowspeaking.net
leaselock.net
liminalspace.net
mightyhealth.net
n91.net
ooolocal.net
ortum.net
paulwall.net
pharmacyforum.net
phuquoc-island.net
pro-pekta.net
professorschoice.net
profuse.net
rentfree.net
s95.net
saintflanagan.net
scrumpm.net
sculpit.diet
sexmails.at
shapefashion.net
shoulderheaven.net
simplynothing.net
stpaulmn.net
supplyinternational.net
thebeliefexchange.net
thecoachinginstitute.net
theshirenoticeboard.net
timeless-wisdom.net
urbanoutreach.net
v48.net
veteranarian.net
whynotgod.net
wildhorsesinneed.net
www.knowspeaking.net
x-m.net
xm4.net
xn--6-1ga.at
xn--7-1ga.at
z39.net

Other certificates including the domain name xn--6-1ga.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for xn--6-1ga.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HL3eSuPEaTxwgEZ5aGu
s+IvGpQ4TinMfNd/3qSvfdcjlC0AYLLvAyT0uX3XyuPTP+qE2PdsWcm4Ok+YoXlh
jfimJE2MyQ/v4QXbbyE4IFAm0QOM3rWCaDKVwQ+CRA9o/9h/IcYVFkm6H49yvNqE
NEVZA9/if2O1djPBFeCyFaS62PKKhgCcIt6t+fpCmYtEB3ZjOg63thbA6BHZ+C3E
tfgfC2hxuw/VisgRwB60PegKlq9JT38UNNA1zx1mUXxQ5PIdIIiBBWHFtnb27ZoJ
qTyE2eF/Ipph20xgddVOCa8DWHA5XSzER088k8qOKItzCDVoopzL7NQjduvThUjh
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278040881946869426405070723978952449585196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 20:28:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 20:28:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--6-1ga.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26819212841901792527959025887960298034835464889540634947269315558882715966605347651012307257582219682870432962264061554046204156282561936545452411881304542433954376794002280968367941766906939104126322511648169433667181044121844672319014732383523559262866095153387968428693504433583180406865246951736953232349329683957188066833386377615070260181719686424744291670706973637049918279611892196696380212009271746159451338398009586420531920687158593199616112993065642975542359028898741996240842148795987707642128269331696737564993022911743201808121644976890179077442879123275586134588289918391355809278366367013679353356611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1c6b71da2e919987437315b978c66fc45065bf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1596 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0yd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2dna.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9h.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a48.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amoremail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewbernard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antibiotic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applicationmarketing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arduinoenigma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrologywizard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astronautical.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachwedding.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behavioralfinance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightwave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buycell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabinlife.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaitea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheeselam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeapparel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialistavenezia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsysdesign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'continuing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottagelife.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisisactionplan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotastream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejorden.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designerdomain.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disposophobia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disputech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domacon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainmarketplace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duiautoinsurance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthmn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faqaboutreligion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faqgod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faqreligion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherflanagan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetishdating.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fflsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosurese.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framegrid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnoca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frflanagan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glennherman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutrad.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairclosure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsound.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesweetschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inteen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'israelpaintandhardware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiekirchick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junglegym.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingofsoul.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowspeaking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaselock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liminalspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mightyhealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n91.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ooolocal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulwall.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacyforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuquoc-island.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-pekta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professorschoice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profuse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentfree.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's95.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintflanagan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrumpm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.diet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmails.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapefashion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoulderheaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplynothing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulmn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplyinternational.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeliefexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecoachinginstitute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshirenoticeboard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeless-wisdom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanoutreach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v48.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veteranarian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whynotgod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildhorsesinneed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowspeaking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x-m.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xm4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--6-1ga.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--7-1ga.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z39.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b298af5f30000040300483046022100d4467836079d13f194c7dbbe56dc3743b89fb7857ef68a37ce73260574c95b57022100efa565b2024e5f79a67fcb79081aeb73cefb48a9e80002aa1aff61692a726de8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b298af5df0000040300473045022100e0655774b14a354e5e3d08347394d6d8dbc98b7cc53649741bc6f3e67db0a7bb02205b951811943a76c2338373ad90778fb3e2b2de57d4a4737178a4bda4da478e8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0091539f8b09343eb1bed4b6150a7d7735b37efa61ae034593ebda30fa1b0df98fee70cf5f8e8b499cce00715bfd15f986002e6366e6ceb713f4738e00e0cf8bf70a893a5dc5d03b3d502437b69bb67f616e5a25ff35e4c3f020fc795b1834eeb69e35d4f6be272e7699fcc55b8f02548a06553329ac8c3e19248fc4ea5a2921ddfa122c1673b1a8bd3894e0d9c3e677bcdae122b6a03928a791acf710685192fe35d02b872fc16ca4e27d835cc66d706c2917974f23b550ca2df5ba262d2dded7725140e78ea71c86bcb6fa5cb14a4bf25c28cd83f4448a8d8cc454b6d12386c24e68804c5add152847b7960f7cfdd6402ef16dc48ee9a4a43af226081403d2d1