jkijiji.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:78:e0:6c:7e:c8:ef:e7:81:ec:cd:8f:a5:a9:37:2a:23:ad was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jkijiji.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:78:e0:6c:7e:c8:ef:e7:81:ec:cd:8f:a5:a9:37:2a:23:ad
Serial Number (int): 389581338168173634474743378495301543928749
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:ca:57:df:5b:8b:4b:b9:78:16:ed:e7:7c:5e:0b:0c:4f:fc:f1:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:7f:31:fb:8e:77:19:f1:82:6a:37:72:91:b2:ad:e3:7f:82:72:8f
Fingerprint (sha256): b7:18:41:98:77:3b:00:95:99:3f:d5:9c:6d:da:a9:da:71:d1:c2:a8:95:80:35:3e:4b:4d:d5:ae:db:98:b1:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jkijiji.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jkijiji.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advego.co
*.aktuelle-spritpreise.de
*.allergy.com.au
*.ameisenvernichtung.de
*.ane.ca
*.bless.com.au
*.cheapflightsbali.com.au
*.communityresources.com.au
*.corporategiftbasket.com.au
*.detect.icu
*.ding.org
*.downvits.net
*.ebye.ca
*.exgovernment.com.au
*.festplatten-datensicherung.de
*.feuerforum.de
*.fingertricks.de
*.flugr.de
*.ftsc.com.au
*.grafikwerkstadt.de
*.heng.net
*.houserenovationssydney.com.au
*.jhnn.org
*.jkijiji.ca
*.kansan.us
*.karnkenkassen.de
*.kidnapped.com.au
*.luzmariabriseno.net
*.mopedhelm.de
*.powertothepeople.com.au
*.prajsko.cz
*.predsevzeti.cz
*.privaglia.it
*.ranzow.de
*.ringbuchordner.de
*.sailtime.com.au
*.samthortensie.de
*.sauberkeitserziehung.de
*.seks.mn
*.soccerland.de
*.synonym.com.au
*.taxable.org
*.vaskulaer.de
*.vipl.de
*.vj.co.za
*.wayoffbroadway.org
*.xn--brentraubenbltter-qqbm.de
*.xn--sprhtrockner-flb.de
*.xn--tierheim-lbbecke-szb.de
*.zoz.com.au
advego.co
aktuelle-spritpreise.de
allergy.com.au
ameisenvernichtung.de
ane.ca
bless.com.au
cheapflightsbali.com.au
communityresources.com.au
corporategiftbasket.com.au
detect.icu
ding.org
downvits.net
ebye.ca
exgovernment.com.au
festplatten-datensicherung.de
feuerforum.de
fingertricks.de
flugr.de
ftsc.com.au
grafikwerkstadt.de
heng.net
houserenovationssydney.com.au
jhnn.org
jkijiji.ca
kansan.us
karnkenkassen.de
kidnapped.com.au
luzmariabriseno.net
mopedhelm.de
powertothepeople.com.au
prajsko.cz
predsevzeti.cz
privaglia.it
ranzow.de
ringbuchordner.de
sailtime.com.au
samthortensie.de
sauberkeitserziehung.de
seks.mn
soccerland.de
synonym.com.au
taxable.org
vaskulaer.de
vipl.de
vj.co.za
wayoffbroadway.org
xn--brentraubenbltter-qqbm.de
xn--sprhtrockner-flb.de
xn--tierheim-lbbecke-szb.de
zoz.com.au

Other certificates including the domain name jkijiji.ca

(limited to 100 certificates)
oysterfarm.com.au
oysterfarm.com.au
oysterfarm.com.au
friedland-eds.be
7328.icu
oysterfarm.com.au
jkijiji.ca
xn--minischildkrten-ktb.de
jkijiji.ca
oysterfarm.com.au
oysterfarm.com.au
oysterfarm.com.au
oysterfarm.com.au
insomnia.biz

Certificate

The complete raw certificate details for jkijiji.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389581338168173634474743378495301543928749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 12:23:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 12:23:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jkijiji.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1002257778003428659196560120373347791452348787707604303804345511027792829145787991573143401353833783320834395980423897697380932210157895307588566308567027282834948192760362134009151539052798336100669539212789949573193862318671134930643072398710900798055240041360591265602298062345481489189853852359115647536895808074982731693059315240044323559329138200077970225891517965304235600689478656810022148852895432764416571323283759594233618941196167978025931507855704358308082648650346982948141210089672396183232911371068733312730361658958122092121203851422596154922486229269253027769883758929225712854140461461675178633285310354391757345023173209531382150777351651453803779527291408677013484040325991297960261811587543471804016157656246237589771650733928236765960581563993316684224316442951992364992358676194372440489965460004643922736228931140454627347560405322692717486778470761569172328900366560000491249861300528030182752526082580389878717186581159384825014257208786618575024329131360806495132345729882185782419060495927170333181378363140171466927443147139782238127187519705946207067152925066977515226023050979492411798657774817620720517953353449795814023148657750729862029337541312334784546273875687487561269407126751508517394818556241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edca57df5b8b4bb97816ede77c5e0b0c4ffcf164
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1812 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advego.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktuelle-spritpreise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allergy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ameisenvernichtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ane.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bless.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapflightsbali.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.communityresources.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporategiftbasket.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detect.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downvits.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebye.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exgovernment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.festplatten-datensicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feuerforum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fingertricks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flugr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftsc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grafikwerkstadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heng.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houserenovationssydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jhnn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkijiji.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kansan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karnkenkassen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidnapped.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luzmariabriseno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mopedhelm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powertothepeople.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prajsko.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.predsevzeti.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privaglia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ranzow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ringbuchordner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sailtime.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samthortensie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sauberkeitserziehung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seks.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soccerland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synonym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaskulaer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vj.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayoffbroadway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brentraubenbltter-qqbm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sprhtrockner-flb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tierheim-lbbecke-szb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advego.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktuelle-spritpreise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allergy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameisenvernichtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ane.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bless.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflightsbali.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityresources.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporategiftbasket.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detect.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downvits.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebye.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exgovernment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festplatten-datensicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feuerforum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fingertricks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flugr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftsc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafikwerkstadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heng.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houserenovationssydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhnn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkijiji.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karnkenkassen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidnapped.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luzmariabriseno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mopedhelm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertothepeople.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prajsko.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predsevzeti.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privaglia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranzow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringbuchordner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailtime.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samthortensie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauberkeitserziehung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seks.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synonym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaskulaer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vj.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayoffbroadway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brentraubenbltter-qqbm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sprhtrockner-flb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tierheim-lbbecke-szb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoz.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170cee99d2600000403004730450221008ec9f0a85be2bddc1a20c9475a82a56bfa711c44f5ae9a2f0253020a5bfd7dde0220256ee8a241dcc8516fb3c7ee888ef4ffc19db0145326f52777aa0a13e2182ca600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170cee99d580000040300463044022026f1e575e87301aa3a996615e616a1ec4948f0af98de618266373ab6e034743e0220316b7ca35973f893fe4c48baf666a3d59c339daeb1d663cdd5c6d58ca97315af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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