affinitywayer.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:21:0f:98:7c:07:bf:4b:de:7f:47:48:75:75:df:c4:a0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=affinitywayer.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:21:0f:98:7c:07:bf:4b:de:7f:47:48:75:75:df:c4:a0
Serial Number (int): 313444005435251054660993079924750200849568
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:b8:d4:b9:fe:3a:d6:ae:03:6c:93:4b:af:12:62:ca:87:dd:97:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:dc:b6:3d:fe:fc:f4:03:4b:96:65:a4:3f:eb:8a:bd:3c:57:22:7d
Fingerprint (sha256): aa:5d:87:8e:66:70:61:f4:c7:5e:14:d6:e8:d0:5c:94:c7:e3:88:cf:09:a6:86:cc:ce:a0:c5:8c:65:34:86:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate affinitywayer.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for affinitywayer.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123gostreams.com
*.4medical.co.uk
*.8oogle.com
*.adamshouse.in
*.affinitywayer.co.uk
*.alibabaautopilot.com
*.bootslearningpool.co.uk
*.carrentalshobart.com.au
*.celticfcstore.net
*.chiasma-opticum.de
*.chivers.com.au
*.curiousca.me
*.designerluggage.com.au
*.doppelschwert.de
*.dresseskent.co.uk
*.erb-punkt.de
*.extensiond.de
*.fixedagent.com.au
*.footsie100.co.uk
*.freewarposters.com
*.ganja.fm
*.hairontrend.co.uk
*.heilktraeuter.de
*.mirtilhos.eu
*.mopee.io
*.numberspastpresentnylottery.org
*.orthopaedies.de
*.payypal.me
*.psychotherahpie.de
*.rilottery.net
*.roxl.co.uk
*.s-adenosylmethionin.de
*.salvageyards.com.au
*.scandoor.co.uk
*.skimontsainteanne.ca
*.southparkwayfishbar.co.uk
*.super-cheap.net
*.theproplespension.co.uk
*.vominsurance.com
*.voominsurence.com
*.wassersthoffperoxid.de
*.wasserstofferoxid.de
*.water-violet.de
*.wayfairr.co.uk
*.xn--begriffswrterbuch-7zb.de
*.xn--bronzemnzen-zhb.de
*.xn--gewchshausgurken-xnb.de
*.xn--nackenwrmer-r8a.de
*.xn--skandinavischembel-r3b.de
*.yourparkingspace.co
123gostreams.com
4medical.co.uk
8oogle.com
adamshouse.in
affinitywayer.co.uk
alibabaautopilot.com
bootslearningpool.co.uk
carrentalshobart.com.au
celticfcstore.net
chiasma-opticum.de
chivers.com.au
curiousca.me
designerluggage.com.au
doppelschwert.de
dresseskent.co.uk
erb-punkt.de
extensiond.de
fixedagent.com.au
footsie100.co.uk
freewarposters.com
ganja.fm
hairontrend.co.uk
heilktraeuter.de
mirtilhos.eu
mopee.io
numberspastpresentnylottery.org
orthopaedies.de
payypal.me
psychotherahpie.de
rilottery.net
roxl.co.uk
s-adenosylmethionin.de
salvageyards.com.au
scandoor.co.uk
skimontsainteanne.ca
southparkwayfishbar.co.uk
super-cheap.net
theproplespension.co.uk
vominsurance.com
voominsurence.com
wassersthoffperoxid.de
wasserstofferoxid.de
water-violet.de
wayfairr.co.uk
xn--begriffswrterbuch-7zb.de
xn--bronzemnzen-zhb.de
xn--gewchshausgurken-xnb.de
xn--nackenwrmer-r8a.de
xn--skandinavischembel-r3b.de
yourparkingspace.co

Other certificates including the domain name affinitywayer.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for affinitywayer.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313444005435251054660993079924750200849568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 22:28:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 22:28:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'affinitywayer.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 948788804515492890357227086117760673796128894249944149676753014056429655396705504278411634142177984249262288334293248170078625767989910448442745321084335014947639233198220766942642971893742237068439959227948340669054238087658838902005313417591442471350338048481025772069463244085338411134925948600969480127849300276847133328073195676682293398654306658758894881317686975832112428982446105169129853737420756482042382172693004602536054508132175008461732017549557879445032586560731279568979058425689837902250261623204404748075631982562699592142387149927521209976634384523286018423168095302571046700064290684137130818538860963876758887250987621689867893686896772480721134601130753747474915616811009962139683117168561549452318972421195399176119222196137258858912606191327022202477741430099506334832166750182887842547653521612998818386300277414047272588982615066176451075506114689141154018387780911050342988374609112668450675157449140284774537742059394593263183529501861120852518028578322655991244751612396640894558002872136705102788537842052946056521501115086940358409574213386314065114743791574780271237075877769826199617916292528776325459568093662919956681071032706564578471785656182015969240856899264585322445253779127134380795219265987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69b8d4b9fe3ad6ae036c934baf1262ca87dd97b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2058 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123gostreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4medical.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8oogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamshouse.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affinitywayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alibabaautopilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bootslearningpool.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrentalshobart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celticfcstore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiasma-opticum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chivers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curiousca.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designerluggage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doppelschwert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dresseskent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erb-punkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extensiond.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixedagent.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footsie100.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freewarposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ganja.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairontrend.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heilktraeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirtilhos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mopee.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.numberspastpresentnylottery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orthopaedies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payypal.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychotherahpie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rilottery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roxl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s-adenosylmethionin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salvageyards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scandoor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimontsainteanne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southparkwayfishbar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.super-cheap.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theproplespension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vominsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voominsurence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wassersthoffperoxid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wasserstofferoxid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.water-violet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayfairr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--begriffswrterbuch-7zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bronzemnzen-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gewchshausgurken-xnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nackenwrmer-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--skandinavischembel-r3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourparkingspace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123gostreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4medical.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8oogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamshouse.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitywayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alibabaautopilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootslearningpool.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrentalshobart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celticfcstore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiasma-opticum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chivers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiousca.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designerluggage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doppelschwert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresseskent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erb-punkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extensiond.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixedagent.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footsie100.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freewarposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganja.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairontrend.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heilktraeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirtilhos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mopee.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numberspastpresentnylottery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthopaedies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payypal.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychotherahpie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rilottery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roxl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-adenosylmethionin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salvageyards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scandoor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimontsainteanne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southparkwayfishbar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super-cheap.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theproplespension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vominsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voominsurence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wassersthoffperoxid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasserstofferoxid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'water-violet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayfairr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--begriffswrterbuch-7zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bronzemnzen-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gewchshausgurken-xnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nackenwrmer-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--skandinavischembel-r3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourparkingspace.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f1b574240000004030046304402207436ff16bcc9f2eedf4a9f1c2459ac87ff52d5d62e485b6d2e1b40f1cb233263022025c4956492673a6304c34c9c2a4df654babd3af7c356098e3dfc535cd21da0a3007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f1b57422e0000040300463044022073d98793abb5a577cf1fa5cb980d1f0201e5349045dcf69d8c763d3edc726cb5022029cd9cfea0b1e634efcf70759c3c8e1ee3d6582016c454cc0cb8406634b0823d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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