kinesthetik.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:c8:73:93:78:74:4e:d1:ae:ec:b1:35:82:39:05:5c:d5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kinesthetik.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:c8:73:93:78:74:4e:d1:ae:ec:b1:35:82:39:05:5c:d5
Serial Number (int): 320812435343877334048318785281057058282709
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:61:92:51:53:6d:ee:aa:99:78:8c:f2:07:79:6b:5d:30:04:55:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:9f:8f:15:0f:1b:1b:5e:47:59:fd:32:6f:23:83:ff:1e:3b:c6:34
Fingerprint (sha256): 9b:f8:ff:fe:ea:64:96:66:53:0d:07:d8:d8:7a:5e:55:99:c2:1f:c4:c5:8f:cd:a7:99:cd:ba:c6:d3:9b:56:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kinesthetik.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kinesthetik.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.absolutismus.de
*.augustabagiennorum.it
*.auslandszusatzversicherung.de
*.autopatcher.de
*.autoversicherng.de
*.baldrock.com.au
*.beachtowels.com.au
*.ck-modellcars.de
*.clad.com.au
*.clarinets.com.au
*.druckeruzubehoer.de
*.ebaykkleinanzeigen.de
*.europeanappliances.com.au
*.extrenergie.de
*.eyelashes.com.au
*.fieldtrips.ca
*.filestube.fr
*.freegiftcard.me
*.fruitwine.com.au
*.getmoneyfast.com.au
*.helptobuynw.co.uk
*.hundezelt.de
*.immolbilien.de
*.jaunt.com.au
*.jenn.tv
*.kinesthetik.de
*.pg-elektronik.de
*.polisingowe.pl
*.prams4kids.co.uk
*.qit.at
*.queromaiscreditos.com.br
*.rasierte-fotzen.de
*.sharevie.co.uk
*.shippers.de
*.studiehulp.be
*.thirstytowels.com.au
*.viajemnet.com.br
*.vollmarstein.de
*.warfor.cz
*.wechsel-gesetzliche-krankenkasse.de
*.workgear.ca
*.wwwfinanzen.de
*.wwwimobielien.de
*.xn--bsensell-n4a.de
*.xn--fhlinger-see-dlb.de
*.xn--gnstige-kinderkleidung-slc.de
*.xn--hrmoos-wxa.de
*.xn--kchenboden-9db.de
*.xn--marmeladenlffel-jtb.de
*.xn--rckendeckung-dlb.de
absolutismus.de
augustabagiennorum.it
auslandszusatzversicherung.de
autopatcher.de
autoversicherng.de
baldrock.com.au
beachtowels.com.au
ck-modellcars.de
clad.com.au
clarinets.com.au
druckeruzubehoer.de
ebaykkleinanzeigen.de
europeanappliances.com.au
extrenergie.de
eyelashes.com.au
fieldtrips.ca
filestube.fr
freegiftcard.me
fruitwine.com.au
getmoneyfast.com.au
helptobuynw.co.uk
hundezelt.de
immolbilien.de
jaunt.com.au
jenn.tv
kinesthetik.de
pg-elektronik.de
polisingowe.pl
prams4kids.co.uk
qit.at
queromaiscreditos.com.br
rasierte-fotzen.de
sharevie.co.uk
shippers.de
studiehulp.be
thirstytowels.com.au
viajemnet.com.br
vollmarstein.de
warfor.cz
wechsel-gesetzliche-krankenkasse.de
workgear.ca
wwwfinanzen.de
wwwimobielien.de
xn--bsensell-n4a.de
xn--fhlinger-see-dlb.de
xn--gnstige-kinderkleidung-slc.de
xn--hrmoos-wxa.de
xn--kchenboden-9db.de
xn--marmeladenlffel-jtb.de
xn--rckendeckung-dlb.de

Other certificates including the domain name kinesthetik.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kinesthetik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320812435343877334048318785281057058282709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 18:14:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 18:14:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kinesthetik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698217119097821021207225005098065681721469908844729601809700772700891140516923818513523793488228302852368590118427931271423557587278905799864831489653252241013630213476408887744338397048231666492868453074137731877428042262262388360641108041517348772658565671798587073572858026157928213782257750659293436695309949891873203502827558304047659917229573393117737307490936474050936343919076639807108105442346997471238668501590507911342386302807856532601696087974607127846203184471434207012177379596841882311460637303862910451005275745033651296027916631018983510457411902090146224253684579150240127702262780570576023758992699577799299831205889287371899846622791092373487794381754142521882134538095821056271631492245933323081910229209050447040064267574535078656937820488028430609381907140280021652339651352425304281071259978032764800850497795221285412649056873805823849040172252916631370008801298169065531096607515423390082476263804373703091255100221234059142396006455209566488736916478804761571971145451784056072828339761811589174260248820045289405660200898778320360747804978669538012377653754402139072933737026551755680260115788692377527010165571261053360713454791480917643174650710123399172978882190483672751356861946912132363763675790227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40619251536deeaa99788cf207796b5d30045551
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2002 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.absolutismus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augustabagiennorum.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auslandszusatzversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autopatcher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoversicherng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baldrock.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beachtowels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ck-modellcars.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarinets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.druckeruzubehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaykkleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.europeanappliances.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extrenergie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyelashes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fieldtrips.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestube.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freegiftcard.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fruitwine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmoneyfast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helptobuynw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hundezelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immolbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaunt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinesthetik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pg-elektronik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polisingowe.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prams4kids.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qit.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queromaiscreditos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rasierte-fotzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharevie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shippers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studiehulp.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thirstytowels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viajemnet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vollmarstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warfor.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wechsel-gesetzliche-krankenkasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workgear.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfinanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwimobielien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bsensell-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fhlinger-see-dlb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gnstige-kinderkleidung-slc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hrmoos-wxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kchenboden-9db.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--marmeladenlffel-jtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rckendeckung-dlb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutismus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustabagiennorum.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auslandszusatzversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopatcher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoversicherng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldrock.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachtowels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ck-modellcars.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarinets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druckeruzubehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaykkleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europeanappliances.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extrenergie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyelashes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldtrips.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filestube.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freegiftcard.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruitwine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmoneyfast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helptobuynw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hundezelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immolbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaunt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinesthetik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-elektronik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polisingowe.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prams4kids.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qit.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queromaiscreditos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasierte-fotzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharevie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiehulp.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirstytowels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viajemnet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vollmarstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warfor.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wechsel-gesetzliche-krankenkasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgear.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfinanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimobielien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bsensell-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fhlinger-see-dlb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gnstige-kinderkleidung-slc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hrmoos-wxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kchenboden-9db.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--marmeladenlffel-jtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rckendeckung-dlb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d6eff292b00000403004830460221009aaaa855d7416f5b1d2d2706e47f57509e6b5126a668375fcd151dcac2eee948022100dcfc06e3483a7049c4814e541e0217b676b093fffba59a097cc7a7fd3e9ef2a700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d6eff293a0000040300473045022037edb6795e1dec8cd99084092c2fd3fae5371ba0169ddabba97279f3d4b40ca30221008d46d3dbc0abee203916def536994b961fd491e20da93e28b61ada71381d62ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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