investmentplan.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:95:cd:1b:0b:c8:c4:d0:9d:38:80:c9:7e:a1:ac:29:10:6f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=investmentplan.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:cd:1b:0b:c8:c4:d0:9d:38:80:c9:7e:a1:ac:29:10:6f
Serial Number (int): 399423848568424955240800206513091472068719
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:cf:2d:47:4c:a8:28:6a:7e:40:65:ae:4e:72:dc:bf:8c:9a:8f:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:45:bf:d0:6e:ea:9e:6d:15:07:67:54:22:e9:16:a7:f2:e0:3a:8e
Fingerprint (sha256): ad:c2:69:d0:e3:15:2c:75:27:e0:31:9f:f2:fd:ac:59:2d:ea:df:c1:a7:cf:de:a5:ed:e0:47:c1:77:54:db:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate investmentplan.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for investmentplan.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.addisnegeronline.com
*.aiteria.com
*.apkae.com
*.appendix-vermiformis.de
*.aurastudiocai.com
*.aurum-chloratum-natronatum.de
*.blushlimited.com
*.buffalocolo.com
*.chalices.com.au
*.danielwelligton.com
*.digipromodelivery.com
*.diphallie.de
*.eljaguargolfcourse.com
*.estafasopcionesbinarias.com
*.falx-cerebri.de
*.flowerava.com
*.formulaprestigemotors.co.uk
*.funbe215.com
*.games05.com
*.gluconeogenese.de
*.hattrickinfo.com
*.hyperhydratation.de
*.investmentplan.co.za
*.jfd.com.au
*.kantooroutlet.eu
*.kcal-tabelle.de
*.lasagne.co.za
*.loginandportal.com
*.mkt-magicazz.com
*.myotone-dystrophie-typ-1.de
*.opendst.org
*.pepelos.com
*.philippehouston.com
*.plasmodium-vivax.de
*.propertysalesmaoleary.com
*.rcworldinfo.com
*.rinderschlachtung.de
*.schwalbenwurz.de
*.shop-programme.de
*.swisshardwoods.co.uk
*.testsdieger.de
*.top-dessous.de
*.veneplast.online
*.votetomleonard.com
*.wundetax.de
*.xn--aquarellbrse-djb.de
*.xn--aufwrmbungen-jcb25a.de
*.xn--chicore-gya.de
*.xn--einbaukchenschrnke-ztb58b.de
*.xn--kaffeegebck-t8a.de
addisnegeronline.com
aiteria.com
apkae.com
appendix-vermiformis.de
aurastudiocai.com
aurum-chloratum-natronatum.de
blushlimited.com
buffalocolo.com
chalices.com.au
danielwelligton.com
digipromodelivery.com
diphallie.de
eljaguargolfcourse.com
estafasopcionesbinarias.com
falx-cerebri.de
flowerava.com
formulaprestigemotors.co.uk
funbe215.com
games05.com
gluconeogenese.de
hattrickinfo.com
hyperhydratation.de
investmentplan.co.za
jfd.com.au
kantooroutlet.eu
kcal-tabelle.de
lasagne.co.za
loginandportal.com
mkt-magicazz.com
myotone-dystrophie-typ-1.de
opendst.org
pepelos.com
philippehouston.com
plasmodium-vivax.de
propertysalesmaoleary.com
rcworldinfo.com
rinderschlachtung.de
schwalbenwurz.de
shop-programme.de
swisshardwoods.co.uk
testsdieger.de
top-dessous.de
veneplast.online
votetomleonard.com
wundetax.de
xn--aquarellbrse-djb.de
xn--aufwrmbungen-jcb25a.de
xn--chicore-gya.de
xn--einbaukchenschrnke-ztb58b.de
xn--kaffeegebck-t8a.de

Other certificates including the domain name investmentplan.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for investmentplan.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOAjCCDOqgAwIBAgISBJXNGwvIxNCdOIDJfqGsKRBvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTEyMDQ1MTlaFw0yNDA2MDkyMDQ1MThaMB8xHTAbBgNVBAMT
FGludmVzdG1lbnRwbGFuLmNvLnphMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEA0/EzGLGC2jQl68ba/CYW0ACmveKgSGR2B7NXSz2+Dgosdj/wHwxe89MQ
cO8MmjquSzud1F+TnWN6FNhI54s1u1OjbLMMUwSbbIRCLsSLZwbvqJoXCgPfhZPJ
ptbhFJrfRFfgCqZyIFluSPqFWd1QSmj1r4kpKr1e4bMYmtK16cnqLbz5ySGfYdZW
a8H3TIoSr4pVDzrpWxTxuFk9JwWuaOeeWww6WAeYMqqPX2LYpE5yUdHbxxDkOv19
KofB/Anc6ofh1OSJpiTNivY+E9BINts+w0kvNcAoohH7ZxdXDNfIlu1mDyAhuV5N
GjbCOG8WbaISaCeEc4x8di9XR7qnI9KpG6NYqquJqNTu/QAYTQUz+zoVc+OlRcHh
vgF8EgBpzu1kjlzzXA19vfx5kBxmEM4/Y67RiZrsm+DLAUhWYaBc1ZnYb8KWtC6v
C1Tl1rilJeQ8oYj/eIXFfJRw3XkFfJnzMvY2ms++IrSu3cP7Q3r0pzKU4RybS14G
tVLXKujbYnECVhtEhwq76KBw7mCbJ8ds+GKOeMNC6LSJCU8JDMI4bIaVqr3NqKXj
o3sVHcleymQjtH5mdmTnqaaiZYKHoTUUfbpL/KV7IHfNBRZrQfnnmQ8uRZII+snr
aWOlS4w2b8RdxHMBOliUx7qTnGldroWLR+Zn5egAsoMj8cX1hfkCAwEAAaOCCiMw
ggofMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUOc8tR0yoKGp+QGWuTnLcv4yaj50w
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgggpBgNVHREEggggMIIIHIIWKi5hZGRp
c25lZ2Vyb25saW5lLmNvbYINKi5haXRlcmlhLmNvbYILKi5hcGthZS5jb22CGSou
YXBwZW5kaXgtdmVybWlmb3JtaXMuZGWCEyouYXVyYXN0dWRpb2NhaS5jb22CHyou
YXVydW0tY2hsb3JhdHVtLW5hdHJvbmF0dW0uZGWCEiouYmx1c2hsaW1pdGVkLmNv
bYIRKi5idWZmYWxvY29sby5jb22CESouY2hhbGljZXMuY29tLmF1ghUqLmRhbmll
bHdlbGxpZ3Rvbi5jb22CFyouZGlnaXByb21vZGVsaXZlcnkuY29tgg4qLmRpcGhh
bGxpZS5kZYIYKi5lbGphZ3VhcmdvbGZjb3Vyc2UuY29tgh0qLmVzdGFmYXNvcGNp
b25lc2JpbmFyaWFzLmNvbYIRKi5mYWx4LWNlcmVicmkuZGWCDyouZmxvd2VyYXZh
LmNvbYIdKi5mb3JtdWxhcHJlc3RpZ2Vtb3RvcnMuY28udWuCDiouZnVuYmUyMTUu
Y29tgg0qLmdhbWVzMDUuY29tghMqLmdsdWNvbmVvZ2VuZXNlLmRlghIqLmhhdHRy
aWNraW5mby5jb22CFSouaHlwZXJoeWRyYXRhdGlvbi5kZYIWKi5pbnZlc3RtZW50
cGxhbi5jby56YYIMKi5qZmQuY29tLmF1ghIqLmthbnRvb3JvdXRsZXQuZXWCESou
a2NhbC10YWJlbGxlLmRlgg8qLmxhc2FnbmUuY28uemGCFCoubG9naW5hbmRwb3J0
YWwuY29tghIqLm1rdC1tYWdpY2F6ei5jb22CHSoubXlvdG9uZS1keXN0cm9waGll
LXR5cC0xLmRlgg0qLm9wZW5kc3Qub3Jngg0qLnBlcGVsb3MuY29tghUqLnBoaWxp
cHBlaG91c3Rvbi5jb22CFSoucGxhc21vZGl1bS12aXZheC5kZYIbKi5wcm9wZXJ0
eXNhbGVzbWFvbGVhcnkuY29tghEqLnJjd29ybGRpbmZvLmNvbYIWKi5yaW5kZXJz
Y2hsYWNodHVuZy5kZYISKi5zY2h3YWxiZW53dXJ6LmRlghMqLnNob3AtcHJvZ3Jh
bW1lLmRlghYqLnN3aXNzaGFyZHdvb2RzLmNvLnVrghAqLnRlc3RzZGllZ2VyLmRl
ghAqLnRvcC1kZXNzb3VzLmRlghIqLnZlbmVwbGFzdC5vbmxpbmWCFCoudm90ZXRv
bWxlb25hcmQuY29tgg0qLnd1bmRldGF4LmRlghkqLnhuLS1hcXVhcmVsbGJyc2Ut
ZGpiLmRlghwqLnhuLS1hdWZ3cm1idW5nZW4tamNiMjVhLmRlghQqLnhuLS1jaGlj
b3JlLWd5YS5kZYIiKi54bi0tZWluYmF1a2NoZW5zY2hybmtlLXp0YjU4Yi5kZYIY
Ki54bi0ta2FmZmVlZ2ViY2stdDhhLmRlghRhZGRpc25lZ2Vyb25saW5lLmNvbYIL
YWl0ZXJpYS5jb22CCWFwa2FlLmNvbYIXYXBwZW5kaXgtdmVybWlmb3JtaXMuZGWC
EWF1cmFzdHVkaW9jYWkuY29tgh1hdXJ1bS1jaGxvcmF0dW0tbmF0cm9uYXR1bS5k
ZYIQYmx1c2hsaW1pdGVkLmNvbYIPYnVmZmFsb2NvbG8uY29tgg9jaGFsaWNlcy5j
b20uYXWCE2RhbmllbHdlbGxpZ3Rvbi5jb22CFWRpZ2lwcm9tb2RlbGl2ZXJ5LmNv
bYIMZGlwaGFsbGllLmRlghZlbGphZ3VhcmdvbGZjb3Vyc2UuY29tghtlc3RhZmFz
b3BjaW9uZXNiaW5hcmlhcy5jb22CD2ZhbHgtY2VyZWJyaS5kZYINZmxvd2VyYXZh
LmNvbYIbZm9ybXVsYXByZXN0aWdlbW90b3JzLmNvLnVrggxmdW5iZTIxNS5jb22C
C2dhbWVzMDUuY29tghFnbHVjb25lb2dlbmVzZS5kZYIQaGF0dHJpY2tpbmZvLmNv
bYITaHlwZXJoeWRyYXRhdGlvbi5kZYIUaW52ZXN0bWVudHBsYW4uY28uemGCCmpm
ZC5jb20uYXWCEGthbnRvb3JvdXRsZXQuZXWCD2tjYWwtdGFiZWxsZS5kZYINbGFz
YWduZS5jby56YYISbG9naW5hbmRwb3J0YWwuY29tghBta3QtbWFnaWNhenouY29t
ghtteW90b25lLWR5c3Ryb3BoaWUtdHlwLTEuZGWCC29wZW5kc3Qub3JnggtwZXBl
bG9zLmNvbYITcGhpbGlwcGVob3VzdG9uLmNvbYITcGxhc21vZGl1bS12aXZheC5k
ZYIZcHJvcGVydHlzYWxlc21hb2xlYXJ5LmNvbYIPcmN3b3JsZGluZm8uY29tghRy
aW5kZXJzY2hsYWNodHVuZy5kZYIQc2Nod2FsYmVud3Vyei5kZYIRc2hvcC1wcm9n
cmFtbWUuZGWCFHN3aXNzaGFyZHdvb2RzLmNvLnVrgg50ZXN0c2RpZWdlci5kZYIO
dG9wLWRlc3NvdXMuZGWCEHZlbmVwbGFzdC5vbmxpbmWCEnZvdGV0b21sZW9uYXJk
LmNvbYILd3VuZGV0YXguZGWCF3huLS1hcXVhcmVsbGJyc2UtZGpiLmRlghp4bi0t
YXVmd3JtYnVuZ2VuLWpjYjI1YS5kZYISeG4tLWNoaWNvcmUtZ3lhLmRlgiB4bi0t
ZWluYmF1a2NoZW5zY2hybmtlLXp0YjU4Yi5kZYIWeG4tLWthZmZlZWdlYmNrLXQ4
YS5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA
8QB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABji96K9AAAAQD
AEcwRQIgYwg8cxPMhFk1dIfSfaIZEz8M/jmj4Ka+naAg4dh/gSoCIQDVv08JSWGW
6Sn/aXJKCrRnXCc7cVSypCN+2axk3vMzLQB3AKLiv9Ye3i8vB6DWTm03p9xlQ7DG
tS6i2reK+Jpt9RfYAAABji96K58AAAQDAEgwRgIhAMMIbGzu4hAAh6/XFW6efVfU
x3iGyDtdCixrWDtsHHOuAiEA5DRUoBaXoPkqDty/hNkK0w5Pq6VAn67O8/urfvXV
6LcwDQYJKoZIhvcNAQELBQADggEBAD9x8OC/SrherAA6qsReGHLzK07bk6Arb3FD
cOMhl1CcAOiJ3ppb3UAry3vLfFIRk5XyS3VTnFMxVnIobwfi439apLZIz6N6fVmU
t8p8Jm7xG1zhnen5FzN0DPY03Z+hTcKiSbwXyacNsJJzn9ki+2A19R2GF1AbySmj
MA7CYWDuwuS6Juqnc+8oueI5/gOkoLsAmvPYeCgGqbnx0On4kz046gWk1dvzoWeh
JyfF9DmQ12EPqAQUdCI+oTTLFwGgpsZOOmy0daX/l2Roq0CXANfI0g191nL4Yoqo
NELyfc9r41Yxm2F7Sn7QygN6pxJFYeBrJLi17KfZM2jpGgaZWkE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0/EzGLGC2jQl68ba/CYW
0ACmveKgSGR2B7NXSz2+Dgosdj/wHwxe89MQcO8MmjquSzud1F+TnWN6FNhI54s1
u1OjbLMMUwSbbIRCLsSLZwbvqJoXCgPfhZPJptbhFJrfRFfgCqZyIFluSPqFWd1Q
Smj1r4kpKr1e4bMYmtK16cnqLbz5ySGfYdZWa8H3TIoSr4pVDzrpWxTxuFk9JwWu
aOeeWww6WAeYMqqPX2LYpE5yUdHbxxDkOv19KofB/Anc6ofh1OSJpiTNivY+E9BI
Nts+w0kvNcAoohH7ZxdXDNfIlu1mDyAhuV5NGjbCOG8WbaISaCeEc4x8di9XR7qn
I9KpG6NYqquJqNTu/QAYTQUz+zoVc+OlRcHhvgF8EgBpzu1kjlzzXA19vfx5kBxm
EM4/Y67RiZrsm+DLAUhWYaBc1ZnYb8KWtC6vC1Tl1rilJeQ8oYj/eIXFfJRw3XkF
fJnzMvY2ms++IrSu3cP7Q3r0pzKU4RybS14GtVLXKujbYnECVhtEhwq76KBw7mCb
J8ds+GKOeMNC6LSJCU8JDMI4bIaVqr3NqKXjo3sVHcleymQjtH5mdmTnqaaiZYKH
oTUUfbpL/KV7IHfNBRZrQfnnmQ8uRZII+snraWOlS4w2b8RdxHMBOliUx7qTnGld
roWLR+Zn5egAsoMj8cX1hfkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399423848568424955240800206513091472068719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 20:45:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 20:45:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'investmentplan.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864648681552088326646893086098757187098429446580220251163585619415163364578780183958946023962245269891645331435657828447516415069415507160484862233209668313472899160489139929090963049547812083593312857985093608416708438190639027529180578845274306841614506392143007070385263789260429197291034067307665607175105180476304264376039391814331700571766296934365940636686496234618427409447850403841712112161928465536268114316179050253117213738846266606853125899670773045199672703510711544929065541711047352075079316637582262622460704087487217837595902498778059891968130925494938618382404401886734777362543569102442286333693260828402857973095505718246509501397129138543168543099541844269858879132684544800433333260031634873576798917021783133778278013160250326180652928180569181289451832026862593089688876624372520251087213261298263255249795615578505027551749529643763663644881083141067699391352347572275230679964742857406711552522590490794063827805093904180296166381941868989053676339208265129478950752091479051469994085649365793600175498614340985190545216963986275650385646674833115309510752222541768804634560398292911046388923811115656784976021618361089467353371649945871131482851589453355070196523936808065755362019819682355093494348219897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39cf2d474ca8286a7e4065ae4e72dcbf8c9a8f9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2080 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addisnegeronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apkae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appendix-vermiformis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurastudiocai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurum-chloratum-natronatum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blushlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buffalocolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chalices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielwelligton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digipromodelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diphallie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eljaguargolfcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estafasopcionesbinarias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.falx-cerebri.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowerava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formulaprestigemotors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funbe215.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.games05.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gluconeogenese.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hattrickinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyperhydratation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investmentplan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jfd.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kantooroutlet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcal-tabelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasagne.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loginandportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkt-magicazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myotone-dystrophie-typ-1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opendst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pepelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philippehouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plasmodium-vivax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propertysalesmaoleary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcworldinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rinderschlachtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwalbenwurz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop-programme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swisshardwoods.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testsdieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.top-dessous.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veneplast.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.votetomleonard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wundetax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--aquarellbrse-djb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--aufwrmbungen-jcb25a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--chicore-gya.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--einbaukchenschrnke-ztb58b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kaffeegebck-t8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addisnegeronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apkae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appendix-vermiformis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurastudiocai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurum-chloratum-natronatum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blushlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffalocolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chalices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielwelligton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digipromodelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diphallie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eljaguargolfcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estafasopcionesbinarias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falx-cerebri.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowerava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulaprestigemotors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funbe215.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games05.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gluconeogenese.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hattrickinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyperhydratation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentplan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfd.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kantooroutlet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcal-tabelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasagne.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginandportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-magicazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myotone-dystrophie-typ-1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippehouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasmodium-vivax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertysalesmaoleary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcworldinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinderschlachtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwalbenwurz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-programme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisshardwoods.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsdieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top-dessous.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veneplast.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votetomleonard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wundetax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aquarellbrse-djb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aufwrmbungen-jcb25a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--chicore-gya.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--einbaukchenschrnke-ztb58b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kaffeegebck-t8a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e2f7a2bd00000040300473045022063083c7313cc8459357487d27da219133f0cfe39a3e0a6be9da020e1d87f812a022100d5bf4f09496196e929ff69724a0ab4675c273b7154b2a4237ed9ac64def3332d007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e2f7a2b9f0000040300483046022100c3086c6ceee2100087afd7156e9e7d57d4c77886c83b5d0a2c6b583b6c1c73ae022100e43454a01697a0f92a0edcbf84d90ad30e4faba5409faecef3fbab7ef5d5e8b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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