rift.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:b0:db:10:82:0a:16:57:6d:dd:88:2c:b9:cb:a5:0c:65 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rift.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:b0:db:10:82:0a:16:57:6d:dd:88:2c:b9:cb:a5:0c:65
Serial Number (int): 269398433809553825565030910514429107178597
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:de:21:22:90:17:3f:63:eb:dd:f1:c9:fe:cb:f5:fc:16:7f:a1:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:94:87:62:51:99:80:8f:b0:f9:7d:b2:f7:e9:15:01:82:51:b6:04
Fingerprint (sha256): af:b5:01:b4:cc:74:f5:c1:fa:f2:b6:2c:bc:47:0e:18:18:2f:d5:35:d7:31:18:3f:9b:7e:23:de:c8:6f:b3:a4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rift.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rift.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airbase.com.au
*.americanatattoo.co
*.armaan.net
*.bancopoplar.es
*.bestcasinobonus.us
*.blondes.org
*.brandmedia.com.au
*.caring.com.au
*.ccap.net
*.computerstores.com.au
*.cucumbers.com.au
*.dentalveneers.com.au
*.digicolor.com.br
*.fzp.de
*.ganetwist.de
*.genetics.icu
*.goldjewelry.com.au
*.hav.com.au
*.howtobuild.net
*.hundeinsel-berlin.de
*.inbak.it
*.inkbank.it
*.internetoutage.xyz
*.jdp.in
*.jrh.de
*.keurig.co
*.kosmo.life
*.kpv.com.au
*.ley.com.au
*.nagelhautpflegestift.de
*.osteoporoses.de
*.rift.com.au
*.rtx.de
*.sclerosis.com.au
*.segurosautos.org
*.seidencorsagen.de
*.starshow.de
*.technikoerse.de
*.tvliecensing.co.uk
*.typical.icu
*.verkaufsaufsteller.de
*.versicherungsvergleich.biz
*.wingtairestaurantltd.co.uk
*.wwwcrowdfunder.co.uk
*.wwwwertgarantie.de
*.xn--grkrbe-bua0m.de
*.xn--rnthe-kva.de
*.xn--www-fhre-4za.de
*.xn--zahnbrstenhalter-nzb.de
*.zhiyi.net
airbase.com.au
americanatattoo.co
armaan.net
bancopoplar.es
bestcasinobonus.us
blondes.org
brandmedia.com.au
caring.com.au
ccap.net
computerstores.com.au
cucumbers.com.au
dentalveneers.com.au
digicolor.com.br
fzp.de
ganetwist.de
genetics.icu
goldjewelry.com.au
hav.com.au
howtobuild.net
hundeinsel-berlin.de
inbak.it
inkbank.it
internetoutage.xyz
jdp.in
jrh.de
keurig.co
kosmo.life
kpv.com.au
ley.com.au
nagelhautpflegestift.de
osteoporoses.de
rift.com.au
rtx.de
sclerosis.com.au
segurosautos.org
seidencorsagen.de
starshow.de
technikoerse.de
tvliecensing.co.uk
typical.icu
verkaufsaufsteller.de
versicherungsvergleich.biz
wingtairestaurantltd.co.uk
wwwcrowdfunder.co.uk
wwwwertgarantie.de
xn--grkrbe-bua0m.de
xn--rnthe-kva.de
xn--www-fhre-4za.de
xn--zahnbrstenhalter-nzb.de
zhiyi.net

Other certificates including the domain name rift.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for rift.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269398433809553825565030910514429107178597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 06:27:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 06:27:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rift.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813969549089581863617161889741795671712804264525751575117196885369958836994617950643484504650581091257978856213541863183021083624050894903122469507972269791441345123003807406113249562942039029162856030021488914020563951815319554597759805720786384926523784924239439128824355312397260763463081487617126045294742524732354043977068088453206482440988277191073463231957187829028535169729019553083573696487241825414164521944151500522067497150086261875104493817573275040457657663971831828288573750603581506170336563208991198842231525074650320177915384872721303263777039876839626332434802115402277224208358995745590160207432136214981019509223793325234593094832125650931981355281378900924057575474671413196279139611733680010933599404767542132630160391834451923644921523741225298464983835539130417278953201553728087617364908547675417513219526068578623890717604690983487660427220823045847176670715110860707251869820317910471001593522375761832271724740441124928705928860777850589865529454164529739296885088145351854095603158413581726763819351702611653249819349854422592459107883439965541999883515770021635349003975194563810628075187980998738997347369468710023220457886596807560758874008796069739317371491128658413363791216687841291145966406157747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42de212290173f63ebddf1c9fecbf5fc167fa107
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airbase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanatattoo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armaan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancopoplar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestcasinobonus.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blondes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandmedia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caring.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccap.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computerstores.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cucumbers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalveneers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digicolor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fzp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ganetwist.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genetics.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldjewelry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hav.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtobuild.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hundeinsel-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inbak.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkbank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internetoutage.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jdp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jrh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keurig.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kosmo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ley.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nagelhautpflegestift.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osteoporoses.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rift.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sclerosis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segurosautos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seidencorsagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starshow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technikoerse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvliecensing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.typical.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verkaufsaufsteller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versicherungsvergleich.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wingtairestaurantltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcrowdfunder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwwertgarantie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--grkrbe-bua0m.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rnthe-kva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--www-fhre-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--zahnbrstenhalter-nzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhiyi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airbase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanatattoo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armaan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancopoplar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcasinobonus.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blondes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmedia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caring.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccap.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computerstores.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cucumbers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalveneers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digicolor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganetwist.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genetics.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldjewelry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hav.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtobuild.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hundeinsel-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbak.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkbank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetoutage.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keurig.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosmo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ley.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagelhautpflegestift.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osteoporoses.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rift.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sclerosis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosautos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seidencorsagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starshow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technikoerse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvliecensing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typical.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verkaufsaufsteller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versicherungsvergleich.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingtairestaurantltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcrowdfunder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwertgarantie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--grkrbe-bua0m.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rnthe-kva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--www-fhre-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zahnbrstenhalter-nzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhiyi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ef3db2a01000004030047304502202fa255fc2f70480f46f61beb23a93b1011d3a5ed813469dda5871ddd858c9ff6022100fdba6b71b64ccc07936d26fbd083a942d082d9e56fdb3e277c017c886999a145007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef3db29f40000040300473045022100986da06ee92f1eb55fd65a9529fb1b899994835736efdfa460b1c52839da4a2b022058a52c0e7421b046d1bdbba2ceaaca839261ea04e63ef650811377d9310a441f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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