www.xpandmi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f3:4c:1f:7c:56:91:f4:0c:eb:56:c0:1f:1a:2b:8c:a7:51 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.xpandmi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:4c:1f:7c:56:91:f4:0c:eb:56:c0:1f:1a:2b:8c:a7:51
Serial Number (int): 431238943699588884588460381687243034371921
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e5:fe:64:da:3f:e5:d4:ca:8b:e3:3d:58:8d:71:76:b2:c1:27:ca:b4
Fingerprint (sha256): 91:44:dd:f1:04:56:7b:99:f8:38:54:94:c5:7f:84:15:4a:95:8e:9c:1b:d3:ee:87:a6:a8:2f:99:ae:d5:f9:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.xpandmi.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xpandmi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2017.devfest.cz
2018.devfest.cz
2019.devfest.cz
2020.devfest.cz
akreditace.ticketspot.cz
api.bigfm.de
api.zerodevx.com
app.intercept.cx
app.twisto.cz
app.youneedawiki.com
auth.cards.erganto.de
auth.configurator.erganto.de
auth.criteria.erganto.de
auth.estaj.cz
auth.iturnier.de
b2b-dev-static.youplant.com
backoffice.danielederosa.de
biergarten.customsites.de
blog.ykdeveloper.com
boaznkoenig.customsites.de
cdn1.zingchart.com
centurion.zartura.com
charles4th.cz
danielfernau.de
dentallabor-seidel.de
devfest.cz
dluhy.remus32.cz
epicsoft.de
examples.zingchart.com
fernau-it-solutions.de
firebase.apptite.de
firebase.feinarbyte.de
floden.consulting
go.die-profiloptimierer.de
idoctor.zamontechs.com
it-service.danielfernau.de
it.danielfernau.de
iturnier.de
julia-tomuschat.de
link.iturnier.de
mini-ova.devfest.cz
mta-sts.danielfernau.de
mta-sts.fernau-it-solutions.de
mta-sts.yukonlip.com
mta-sts.yukonlips.com
mta-sts.yukontec.com
open.fyeo-dev.de
open.fyeo-test.de
pardubice.devfest.cz
participativnirozpocet.praha5.cz
podnikatelroku.praha5.cz
salatinos.cz
src.zingchart.com
src.zinggrid.com
srp.app.intercept.cx
staging.www.zerodevx.com
static-b.youplant.com
static-dev.youplant.com
static-qas.youplant.com
static.youplant.com
t4t.julijane.de
tadynakup.cz
tagebuch.felix-scholl.de
telemetry.bigfm.de
tjjiskra.vojnuvmestec.cz
toolbox.bigfm.de
vodvoz.mgw.cz
webhooks.yumankind.com
www-cdn.zingchart.com
www.charles4th.cz
www.danielfernau.de
www.dentallabor-seidel.de
www.devfest.cz
www.epicsoft.de
www.fernau-it-solutions.de
www.floden.consulting
www.salatinos.cz
www.tadynakup.cz
www.xpandmi.com
www.yashvanzara.com
www.yeye-bat.com
www.youthpowerorg.com
www.yukonlip.com
www.yukonlips.com
www.zeibox.com
www.zerodevx.com
www.zingchart.com
www.zinggrid.com
yashvanzara.com
yeye-bat.com
youthpowerorg.com
ypbay.com
yukonlip.com
yukonlips.com
zeibox.com
zeodel.com
zerodevx.com
zingchart.com
zinggrid.com
zrfikry.com

Other certificates including the domain name xpandmi.com

(limited to 100 certificates)
xn--ch-mareabarloventea-d4b.elinmejorable.com
clothingforukraine.com
shoplink.app
trnbns.com
www.xpandmi.com
www.s-checkamulet.com
amana.ai
clothingforukraine.com
wiki.lucknetwork.jp
www.xpandmi.com
www.ramvotech.com
wiki.lucknetwork.jp
www.s-checkamulet.com
d5r45yzx.meetnewme.jp
www.parsecom.ro
www.pif.vc
xn--ch-mareabarloventea-d4b.elinmejorable.com
cdn.xenonshop.in
www.pif.vc
www.ramvotech.com

Certificate

The complete raw certificate details for www.xpandmi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431238943699588884588460381687243034371921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-23 19:36:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 19:36:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xpandmi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2020 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2017.devfest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018.devfest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019.devfest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020.devfest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akreditace.ticketspot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bigfm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.zerodevx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.intercept.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.twisto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.youneedawiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.cards.erganto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.configurator.erganto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.criteria.erganto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.estaj.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.iturnier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-dev-static.youplant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.danielederosa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biergarten.customsites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ykdeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boaznkoenig.customsites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.zingchart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurion.zartura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charles4th.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielfernau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentallabor-seidel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dluhy.remus32.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicsoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examples.zingchart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernau-it-solutions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.apptite.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.feinarbyte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floden.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.die-profiloptimierer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idoctor.zamontechs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-service.danielfernau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.danielfernau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iturnier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julia-tomuschat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.iturnier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-ova.devfest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.danielfernau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.fernau-it-solutions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.yukonlip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.yukonlips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.yukontec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.fyeo-dev.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.fyeo-test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardubice.devfest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'participativnirozpocet.praha5.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podnikatelroku.praha5.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salatinos.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.zingchart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.zinggrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srp.app.intercept.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.www.zerodevx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-b.youplant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-dev.youplant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-qas.youplant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.youplant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't4t.julijane.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadynakup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagebuch.felix-scholl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemetry.bigfm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjjiskra.vojnuvmestec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolbox.bigfm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodvoz.mgw.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhooks.yumankind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn.zingchart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charles4th.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danielfernau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentallabor-seidel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devfest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicsoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fernau-it-solutions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floden.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salatinos.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tadynakup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xpandmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yashvanzara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yeye-bat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youthpowerorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yukonlip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yukonlips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeibox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zerodevx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zingchart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zinggrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yashvanzara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeye-bat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youthpowerorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ypbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yukonlip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yukonlips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeibox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerodevx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zingchart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinggrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zrfikry.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000174bcae813600000403004730450221009e3a678f96e173c2f6250ab58e905d494ccbef719fd6db87a6df14534b7b49bf0220578bc8c4d2c59bb658380296c03c1c4b7266a4c33e235753466c3d90c5fbc2ff007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000174bcae81460000040300473045022005b731f2151712976805405ef3bf9ff1bb2436b3cfb2207b7c6d8a1b7cd527ee022100d9ae09d258fbdad9a6bfa41be51e18170e26cf0750e89d6a9f9428716bf6dbbc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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