herig.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:ad:24:2f:be:93:99:8d:19:a2:54:26:ec:1c:15:73:09 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=herig.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:ad:24:2f:be:93:99:8d:19:a2:54:26:ec:1c:15:73:09
Serial Number (int): 285046485447155473796410944674737205637897
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:16:fe:45:87:e0:bb:4b:d8:2d:b1:83:d3:5c:cf:63:81:68:3b:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:d5:5f:70:ed:49:19:6f:90:a0:f7:6d:1c:f7:5c:d7:a0:64:0d:f9
Fingerprint (sha256): 94:22:14:ad:22:70:bf:21:42:87:66:bf:6c:fa:2b:43:0a:03:25:83:ef:dd:ae:e2:7a:7b:67:c1:a2:6b:a6:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate herig.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for herig.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.770.com.au
*.applecenter.be
*.ara3.net
*.athabascahillsidemotel.net
*.autobaterien.de
*.bedroomreviewdesign.co
*.browaergames.de
*.ceridianhre.co.uk
*.coalvilleacupuncture.co.uk
*.deckdesign.com.au
*.earrings.net.au
*.esundheitsinformation.de
*.examfeedback.net
*.galafrisuren.de
*.goldcoastphotographer.com.au
*.goldcoastshopfitters.com.au
*.herig.com.br
*.herzstechen.de
*.hilodaycheck.de
*.hotelbiarritz.com.br
*.inchcolm.com.au
*.iphonemoviez.net
*.japaneseclips.net
*.kij.ca
*.kindergeldzuschlagsrechner.de
*.korbbetten.de
*.kortisonspritze.de
*.krin.org
*.kubotan.de
*.langtunig.de
*.makeasite.biz
*.mattressfactory.ca
*.miniskiphire.com.au
*.mobyline.it
*.nevertheless.icu
*.onlinebanks.com.au
*.onlinexpert.com.au
*.pestscontrol.com.au
*.pkv-computervergleich.de
*.randwickrealestate.com.au
*.receitasdepanquecas.com.br
*.silversterlauf.de
*.switchgear.com.au
*.taev.de
*.texaswomanhealth.org
*.warehouseoutletaustralia.com.au
*.watchtvseries.it
*.willkits.com.au
*.xn--mrchenbasar-l8a.de
*.xn--schlerfotos-vhb.de
770.com.au
applecenter.be
ara3.net
athabascahillsidemotel.net
autobaterien.de
bedroomreviewdesign.co
browaergames.de
ceridianhre.co.uk
coalvilleacupuncture.co.uk
deckdesign.com.au
earrings.net.au
esundheitsinformation.de
examfeedback.net
galafrisuren.de
goldcoastphotographer.com.au
goldcoastshopfitters.com.au
herig.com.br
herzstechen.de
hilodaycheck.de
hotelbiarritz.com.br
inchcolm.com.au
iphonemoviez.net
japaneseclips.net
kij.ca
kindergeldzuschlagsrechner.de
korbbetten.de
kortisonspritze.de
krin.org
kubotan.de
langtunig.de
makeasite.biz
mattressfactory.ca
miniskiphire.com.au
mobyline.it
nevertheless.icu
onlinebanks.com.au
onlinexpert.com.au
pestscontrol.com.au
pkv-computervergleich.de
randwickrealestate.com.au
receitasdepanquecas.com.br
silversterlauf.de
switchgear.com.au
taev.de
texaswomanhealth.org
warehouseoutletaustralia.com.au
watchtvseries.it
willkits.com.au
xn--mrchenbasar-l8a.de
xn--schlerfotos-vhb.de

Other certificates including the domain name herig.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for herig.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1FaByEKw51BdyWx45VS7
k1VC3tG+OqGW75nHEC/BoXUaK3xMLs8M5FqdmdNYZqSEVt/dXj5P3dRHH0Norf45
xD1mJduZ87X9DbXbv3jJU6okaC8TvckbHZXxl1ePCIoPq6/4QIS+VPiZ//phF3b3
Sw4bokw9enPb11w3xZ80f9MbvgKLlNssLB2kqxC7lGyW2jBiZWuXso7VlUrIEzVh
677LHlCE7wqPV8UQ2SF4exQToc33mqowrMHhocV3jumW7oO61WynJBXLl1vVaF+a
bemfiQ2m+c9oguc4EmxVfGoqhaEkq1GlbkibUNYmHtsXXUvoeVkXJTc8ou2LeXvG
5L6XFy+pIC4tu0/PD2whnS5l04ayEgzNkt0+L6CXuySJBFVeSOQeZSkYfSyRblfM
ZvL/3z1dgm075zzmlM33BDGLRAaBiJ4k/9Gy5/J/RhxJX4WWlveHiCKuh9hQqIhs
48i/9DW3AtZkj4JIuSPAVY6nk9+5Qo+5qu5D4ynmWn3cvcdRtxywjij7MDwwWAnP
Oxr4OdLCss/Xv+sps778hVjmvmQxgP7C2OKC0GQyk7MgckFwJrUXw9TGyFTejhC6
7Ez42qNzJss/qTXw35cj7M57VEXOvrYWDQdE285btZ1uLI6Vqatd4IdmAst4zKfw
Z+W+ERXw5PIu1b/CZ5668uECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285046485447155473796410944674737205637897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 13:48:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 13:48:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'herig.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866263126851110715474214209870823388671265796096824009429982162631202041499554389627829037025616458821942221043357860118180817244937990206136759898426946261625802482425480436352013057490614351250067249360961800601528376848430455281334674062232667852755744240031952145519718123461034636353767187030778573189978447638763056436047508727784508764051533068024350089609225885666954517816298625931266520008102603962875105608386954136723794016584009410073508990918488664029768864012228660774802733062080923949831461685302113891109201543484132118863912329754150834130765406625367353792961414566048549179473878324510684222840520727781496755860161555653400012532994704423246073376637809187319230643821991318308283044401885304615099651405400955460876459355844692672431324069733159109476826820716916587257844794336254791373014838538206865021464538640375498579522167303558122536779438638634993781105165810503416041363716828277883504664334277297560753191448589183235327190233437951818044135216392987733428536273873112009564782229490405079244633276176537664651392995078747846936478983474880703785503891874934558697556839821018888505987532474977872802802125978114471102610838743527381645635585551818978962570006622002036047651787171919933613708866273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c16fe4587e0bb4bd82db183d35ccf6381683b5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2052 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.770.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applecenter.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ara3.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athabascahillsidemotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autobaterien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedroomreviewdesign.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.browaergames.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceridianhre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coalvilleacupuncture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deckdesign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earrings.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esundheitsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examfeedback.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galafrisuren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldcoastphotographer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldcoastshopfitters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herzstechen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilodaycheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelbiarritz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inchcolm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iphonemoviez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japaneseclips.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kij.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kindergeldzuschlagsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.korbbetten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kortisonspritze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kubotan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.langtunig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeasite.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mattressfactory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miniskiphire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobyline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevertheless.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinebanks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinexpert.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pestscontrol.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pkv-computervergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randwickrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.receitasdepanquecas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silversterlauf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.switchgear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taev.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texaswomanhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warehouseoutletaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchtvseries.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willkits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mrchenbasar-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schlerfotos-vhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '770.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecenter.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ara3.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athabascahillsidemotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autobaterien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedroomreviewdesign.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'browaergames.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceridianhre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalvilleacupuncture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deckdesign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earrings.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esundheitsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examfeedback.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galafrisuren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoastphotographer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoastshopfitters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herzstechen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilodaycheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelbiarritz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inchcolm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonemoviez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japaneseclips.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kij.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindergeldzuschlagsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korbbetten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kortisonspritze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubotan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langtunig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeasite.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattressfactory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miniskiphire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobyline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevertheless.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinebanks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinexpert.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestscontrol.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkv-computervergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randwickrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receitasdepanquecas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silversterlauf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchgear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taev.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswomanhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouseoutletaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchtvseries.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willkits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mrchenbasar-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schlerfotos-vhb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eeb21d6e70000040300463044022022bc84fbd39df66a9aab80099d663c2f80b78ada121bb0bd8c9eca91c39e59bd02202ed9f66294f50bd5988f9ac5469deea4e2da266f47a4c1d9b31d77e3ee35a480007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eeb21d6db0000040300483046022100c131964c55f09b4ab4656c290a1a8c628194e99b0ce815fc6215566acea45e14022100f23640bd71f1966be780919e6aceb921aaac272c17d851dd1d06bc26c1d6edf6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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