liferaft.org

Issued by R3

About this certificate

This digital certificate with serial number 04:56:eb:1d:22:9f:31:80:26:ad:e7:b4:16:59:01:c6:53:8a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=liferaft.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:eb:1d:22:9f:31:80:26:ad:e7:b4:16:59:01:c6:53:8a
Serial Number (int): 378025947140074571239048326033392429061002
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:e4:d7:26:41:81:12:8d:57:18:c4:a2:eb:37:4d:fe:1a:67:28:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:b2:0e:ad:99:3b:66:c9:24:da:7e:ad:0e:17:8a:51:d7:62:10:bb
Fingerprint (sha256): 9c:d9:bf:25:be:6e:25:ba:45:26:79:66:8b:cc:a1:02:19:3d:23:df:1d:00:c5:92:68:fb:04:aa:1e:dc:65:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate liferaft.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liferaft.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.120sekunden.com
*.300.es
*.alphaappraisalmn.com
*.arquitetu.com.br
*.asianapplepie.com
*.atuttorealityiltour.it
*.avf.nl
*.babywickeltasche.de
*.besottedbrand.com
*.carmendeedy.com
*.coeliac.net
*.cooperu.com
*.cvnw.com.br
*.d-doghouse.com
*.dooda.tv
*.dynamic.es
*.eazyproperty.website
*.educatiaglobal.com
*.elitrjavhd.com
*.extraincome.com.au
*.foreerfit.tv
*.gtq.nl
*.guenstig-schlafen.de
*.ilea.org
*.incandescentphoenix.com
*.jennifergarant.com
*.kanpian3.xyz
*.kindergeldtabelle.de
*.liferaft.org
*.minck.nl
*.mortgageattorneynearme.com
*.myfederatedhermesaccount.com
*.nyse6.com
*.pacificrootskava.com
*.pedrosaratula.com
*.pgembeddedsystems.com
*.plumbingsupplies.de
*.pormbub.com
*.ppgbr.com.br
*.prarietest.com
*.qc.be
*.spiritualmindscience.com
*.the-haberdashery-shop.co.uk
*.thesesupercodes.com
*.time2play-online.net
*.wado.be
*.whitelabel.com.au
*.xn--gedankenbertragung-t6b.de
*.yobalia.es
*.zedflix.online
120sekunden.com
300.es
alphaappraisalmn.com
arquitetu.com.br
asianapplepie.com
atuttorealityiltour.it
avf.nl
babywickeltasche.de
besottedbrand.com
carmendeedy.com
coeliac.net
cooperu.com
cvnw.com.br
d-doghouse.com
dooda.tv
dynamic.es
eazyproperty.website
educatiaglobal.com
elitrjavhd.com
extraincome.com.au
foreerfit.tv
gtq.nl
guenstig-schlafen.de
ilea.org
incandescentphoenix.com
jennifergarant.com
kanpian3.xyz
kindergeldtabelle.de
liferaft.org
minck.nl
mortgageattorneynearme.com
myfederatedhermesaccount.com
nyse6.com
pacificrootskava.com
pedrosaratula.com
pgembeddedsystems.com
plumbingsupplies.de
pormbub.com
ppgbr.com.br
prarietest.com
qc.be
spiritualmindscience.com
the-haberdashery-shop.co.uk
thesesupercodes.com
time2play-online.net
wado.be
whitelabel.com.au
xn--gedankenbertragung-t6b.de
yobalia.es
zedflix.online

Other certificates including the domain name liferaft.org

(limited to 100 certificates)
boynames.com.au
dipaj.com
franceapocalypse.com
minck.nl
bha-compliance.org.uk
aer2021.com
liferaft.org
*.300.es
atuttorealityiltour.it
liferaft.org
300.es
caroundyou.com
serviseplus.com
avf.nl

Certificate

The complete raw certificate details for liferaft.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378025947140074571239048326033392429061002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 21:45:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-07 21:45:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liferaft.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764916250408583626804112781066877704229647155060656099945235733134114964479450305518594619546462431272454187397260035252898808025606031318347868122350120793478730257681596608975156191044820903023363408639227706613338460006795456917973439358996086617884520456020766711524770670162403155368215552242153522987923470279575471404202433294598456884474562548359754900610713195511389504524288258897238594180204792332845217119222397867458167770007783332824930654969677188849673477146787434781467435082343191118913344108107005830056507468529300409025241649106617281245033132181296065488027221852555114535069738482187391999842074407117546292183676729286628382968116939990580458416861478986792656174824894996705416554510722149884183984494528936594944779959068022268698912259304925238211884326540376059473579171906374656900563720573166818798043849152218025628712992556095660615087362439537678333343733824484211250465006540655515165111850316078366722044986801219114268755884211028455200259570741633707844609463984780182291793837309787626124701678345927556169708483403657109850922138151036022607689722013585477957853731675140443394804301463242550193444403335954818278613842121678391518535903802572871755664521346864607553041375352599024079445909589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01e4d7264181128d5718c4a2eb374dfe1a6728d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1856 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.120sekunden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.300.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alphaappraisalmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arquitetu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asianapplepie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atuttorealityiltour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babywickeltasche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besottedbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carmendeedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coeliac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cooperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvnw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-doghouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dooda.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eazyproperty.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educatiaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitrjavhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extraincome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foreerfit.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtq.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guenstig-schlafen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.incandescentphoenix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jennifergarant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanpian3.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kindergeldtabelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liferaft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minck.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgageattorneynearme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfederatedhermesaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyse6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificrootskava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pedrosaratula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pgembeddedsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plumbingsupplies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pormbub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppgbr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prarietest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritualmindscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-haberdashery-shop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesesupercodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.time2play-online.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wado.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitelabel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gedankenbertragung-t6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yobalia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zedflix.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '120sekunden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '300.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphaappraisalmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arquitetu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asianapplepie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atuttorealityiltour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babywickeltasche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besottedbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmendeedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coeliac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvnw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-doghouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dooda.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eazyproperty.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educatiaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitrjavhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraincome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreerfit.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtq.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guenstig-schlafen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incandescentphoenix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jennifergarant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanpian3.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindergeldtabelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liferaft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minck.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgageattorneynearme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfederatedhermesaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyse6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificrootskava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedrosaratula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgembeddedsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plumbingsupplies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pormbub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppgbr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prarietest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualmindscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-haberdashery-shop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesesupercodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time2play-online.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wado.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitelabel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gedankenbertragung-t6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yobalia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zedflix.online'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018628e807b90000040300473045022024fa4a95241fee6cc9bd00940448fb9b30d40c0a236932a064f852af7f24f644022100c66f7dae591ced3fd810b86f7e742fe52f006059551525736f2434adb47f3815007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018628e807b10000040300483046022100b6f4e8f8bae393bad3aad75886d92a39a677ba53cb39e29d73fd01448138a4b9022100824c5c4fe7808af19131c010941ec7b8b08ed91cea34d51b576d7b7b44aba308
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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