preishamer.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7b:4b:18:86:23:fb:24:c6:6e:fc:21:fc:f3:08:be:7a:47 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=preishamer.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7b:4b:18:86:23:fb:24:c6:6e:fc:21:fc:f3:08:be:7a:47
Serial Number (int): 390403694293818488892015170886067331955271
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 66:27:33:dd:64:b3:08:ba:fd:ef:5a:cf:fa:f0:04:26:06:52:c3:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:04:5f:35:2e:1c:3e:54:c7:99:29:b1:54:aa:65:ef:dd:e8:9f:27
Fingerprint (sha256): 97:5c:85:80:d8:7e:c9:ba:be:f3:27:aa:a9:2c:73:8e:6a:13:1d:84:a2:26:c0:89:41:65:60:bb:17:8f:f3:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate preishamer.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preishamer.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aakash.ac
*.amazonazon.co.uk
*.ambiantescuola.it
*.american-conquest.de
*.apohtekenumschau.de
*.attac.net
*.boatrace.com.au
*.brotterode.de
*.btsync.info
*.c2cschools.org
*.carea.biz
*.courierhub.in
*.dermatology.com.au
*.dollz.biz
*.engineeringsoftware.com.au
*.engwinkelglaukom.de
*.ewastenaw.org
*.fare.es
*.features.de
*.galatina.de
*.gallenblasenkrebs.de
*.gesundheirsinformation.de
*.gesundheitsniformation.de
*.gratissexclip.de
*.greenvillehumane.org
*.gulfenergy.org
*.iknowl.co
*.jalshamovie.in
*.lawcounsel.info
*.literature.nl
*.lovecyprusweddings.co.uk
*.mji.de
*.mjj.de
*.net2host.in
*.pensionsrueckstellungen.de
*.pokemaniac.net
*.preferences.com.au
*.preishamer.de
*.property.es
*.racehorsetraining.com.au
*.raspberrycenter.de
*.reizstrombehandlung.de
*.relaxation.co.za
*.rolie.net
*.solidoakfurniturewarehouse.co.uk
*.sonico.es
*.souvenirs.co.za
*.tarifvertag.de
*.xn--diterfolge-r5a.de
*.xn--glcksmnze-r9ae.de
aakash.ac
amazonazon.co.uk
ambiantescuola.it
american-conquest.de
apohtekenumschau.de
attac.net
boatrace.com.au
brotterode.de
btsync.info
c2cschools.org
carea.biz
courierhub.in
dermatology.com.au
dollz.biz
engineeringsoftware.com.au
engwinkelglaukom.de
ewastenaw.org
fare.es
features.de
galatina.de
gallenblasenkrebs.de
gesundheirsinformation.de
gesundheitsniformation.de
gratissexclip.de
greenvillehumane.org
gulfenergy.org
iknowl.co
jalshamovie.in
lawcounsel.info
literature.nl
lovecyprusweddings.co.uk
mji.de
mjj.de
net2host.in
pensionsrueckstellungen.de
pokemaniac.net
preferences.com.au
preishamer.de
property.es
racehorsetraining.com.au
raspberrycenter.de
reizstrombehandlung.de
relaxation.co.za
rolie.net
solidoakfurniturewarehouse.co.uk
sonico.es
souvenirs.co.za
tarifvertag.de
xn--diterfolge-r5a.de
xn--glcksmnze-r9ae.de

Other certificates including the domain name preishamer.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for preishamer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390403694293818488892015170886067331955271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 13:15:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 13:15:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preishamer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924719940877160029248882168540765790396670226506904197113646741427346458055906702414571542987809891199122699337029668965418245078232909471217261947195871324177643186342928334898923943011386751662900698429724921200798123309155866611777559155384286162707497925991285334797994867565318234765381984995025364074312600941662540246126738436939757759281932637633097095812880877686262537302412108635357575385754278293861813648923519987308357408594423872086671028790010981575188693137929072209848231067327176511951695689743774823796274339873929918333420260976339245285354331597612703278034993526021154463012464660734664423292639373450131833651875554726972848390635578114757709125396226931814831744312775837926885601482879811417191047940157830856768046572173496989854273921989846786816580180827454164538837348084950608490261312557030348434470331826887037161014013295854846844538724672908119312346650875755532710506723954755710454213619328559525890637215850606392575720655278824783473676490425893963686330393662348813212499509135843609646324747942176152330423586424344277339825455519184178273847382696364288552164542880137410000885005350690368313912488099537953686867965916167211690822946124108796928717599233365128956585467793669005346771867593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							662733dd64b308bafdef5acffaf004260652c3e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aakash.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambiantescuola.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.american-conquest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apohtekenumschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatrace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brotterode.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btsync.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c2cschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carea.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courierhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dermatology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dollz.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engineeringsoftware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engwinkelglaukom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ewastenaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fare.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.features.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galatina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallenblasenkrebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundheirsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundheitsniformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gratissexclip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenvillehumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulfenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iknowl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jalshamovie.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawcounsel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.literature.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovecyprusweddings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mji.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mjj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.net2host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensionsrueckstellungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokemaniac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preferences.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preishamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.property.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racehorsetraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raspberrycenter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reizstrombehandlung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relaxation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rolie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solidoakfurniturewarehouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.souvenirs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarifvertag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--diterfolge-r5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glcksmnze-r9ae.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aakash.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambiantescuola.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'american-conquest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apohtekenumschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatrace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brotterode.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btsync.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2cschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carea.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courierhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermatology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollz.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineeringsoftware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engwinkelglaukom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewastenaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fare.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'features.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galatina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallenblasenkrebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundheirsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundheitsniformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratissexclip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenvillehumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulfenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iknowl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jalshamovie.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawcounsel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literature.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovecyprusweddings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mji.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net2host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionsrueckstellungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemaniac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preishamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racehorsetraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raspberrycenter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reizstrombehandlung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaxation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solidoakfurniturewarehouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'souvenirs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarifvertag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--diterfolge-r5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glcksmnze-r9ae.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170ba8063c5000004030046304402202f608eca8a8cadf875a29341374271588b2f53bb29a6ec83129a7913deb6b2830220076b9eedf7f2bd65ddfbf3baf048166d1f2751a66473afc60ca30a00ed4849d1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170ba8063b800000403004730450221008d30b94bccd6e07332772c3bf0e325587831eec5536143a55331f7e9592b6edb02202a9d8d9fc007af821f28d8eaaac98c00134fcef0857a9abf4f8cec09cc80224a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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