decisions.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:22:0e:b1:a3:22:63:a6:92:ba:fd:6c:7c:60:b8:a0:0a:b7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=decisions.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:22:0e:b1:a3:22:63:a6:92:ba:fd:6c:7c:60:b8:a0:0a:b7
Serial Number (int): 272925989807834960495617836132823625370295
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:3d:f2:9c:f2:10:0d:e0:9d:85:8e:87:31:24:c3:99:50:a4:d4:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:89:24:90:ac:6d:20:6f:a4:56:26:82:bc:10:4e:61:20:0f:40:9d
Fingerprint (sha256): bd:f9:51:b4:d4:d4:f1:1d:d0:6d:f7:90:c4:a2:30:2d:ee:21:9c:45:6d:74:36:af:9d:35:2a:4e:f9:a5:3a:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate decisions.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for decisions.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adultdiapers.com.au
*.aemco.biz
*.ager4nc.com
*.aislingweddings.com
*.arschlochbilder.de
*.b34s.com
*.boldest.net
*.brogata.com
*.bukkotapes.com
*.clownillustraition.com
*.conservenergy.org
*.dastiplasti.com
*.decisions.co.za
*.district1forherbold.com
*.dlj.de
*.erotikfilmer.de
*.erotikshops24.de
*.erziehungsbeauftragung.de
*.filmstream.online
*.florens2010.com
*.footballers.com.au
*.garagedoorservice.site
*.grant8718pharmacy.com
*.lingdianxs.cc
*.lpgvitrakchayan.in
*.lufthahnsa.de
*.lufthansad.de
*.lufthansade.de
*.mapiexpertise.com
*.mspclamps.com
*.okumurak.net
*.qhmsgl.com
*.rains.com.au
*.rossma.de
*.rtln.de
*.sectorexport.com
*.senile-demenz.de
*.stachowskisausage.com
*.staedl.de
*.stephan.eu
*.sw40hx.com
*.swkjkmcy.com
*.tarifvergeich.de
*.testbreichte.de
*.theambassador.com.au
*.thesniper.net
*.web-newtype.com
*.wordschecker.com
*.xn--sinnessprche-llb.de
*.yylnreveg.org
adultdiapers.com.au
aemco.biz
ager4nc.com
aislingweddings.com
arschlochbilder.de
b34s.com
boldest.net
brogata.com
bukkotapes.com
clownillustraition.com
conservenergy.org
dastiplasti.com
decisions.co.za
district1forherbold.com
dlj.de
erotikfilmer.de
erotikshops24.de
erziehungsbeauftragung.de
filmstream.online
florens2010.com
footballers.com.au
garagedoorservice.site
grant8718pharmacy.com
lingdianxs.cc
lpgvitrakchayan.in
lufthahnsa.de
lufthansad.de
lufthansade.de
mapiexpertise.com
mspclamps.com
okumurak.net
qhmsgl.com
rains.com.au
rossma.de
rtln.de
sectorexport.com
senile-demenz.de
stachowskisausage.com
staedl.de
stephan.eu
sw40hx.com
swkjkmcy.com
tarifvergeich.de
testbreichte.de
theambassador.com.au
thesniper.net
web-newtype.com
wordschecker.com
xn--sinnessprche-llb.de
yylnreveg.org

Other certificates including the domain name decisions.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for decisions.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272925989807834960495617836132823625370295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 21:30:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 21:30:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decisions.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848622091917642441555489186534253239324302413339121668127370647422253120308766703765899399140703141944663524645316300366673532516332597558010558752926192740664771491128692730424429590253756681022085644118925737170051300645824447563985308472038611945710840643416954944445239525692180185952653093641689384679012381766047635739223285698723508324098881619706122025477107728662567686828803021011859011331869578458578236389505680863984815604074025309892669244023641905568907405989419496705995009407237781334644043854083107809937835686480704691246302865689558098315513855241122895876419420929665083707094193797096242901882262712174326562304973258046131833371140111930040117596748453460726567136128574214230308547581901781731347713714983543115604858089934750786942334949539730964537700062478457011140179798754488455665962276864117575895506699864182966373358041481391033435493530931765979885017264555429354070979460526133160506198882505322687137033333718295581684248426018183060556822865361558973596348637244006918594899304228391049543137183387718448307806921774950319404211027876471568263619472768675216982254701986788820314629348161099483607045406062332009603162065454586294008014678611810385125596444732705192159421947924940737709387963287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							303df29cf2100de09d858e873124c39950a4d4a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultdiapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aemco.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ager4nc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aislingweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arschlochbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b34s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boldest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brogata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukkotapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clownillustraition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conservenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dastiplasti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.district1forherbold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotikfilmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotikshops24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erziehungsbeauftragung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmstream.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florens2010.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footballers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garagedoorservice.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grant8718pharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingdianxs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpgvitrakchayan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthahnsa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapiexpertise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mspclamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okumurak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qhmsgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rossma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sectorexport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senile-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stachowskisausage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staedl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stephan.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sw40hx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swkjkmcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarifvergeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testbreichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theambassador.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesniper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web-newtype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordschecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sinnessprche-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yylnreveg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultdiapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aemco.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ager4nc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislingweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arschlochbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b34s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boldest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brogata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukkotapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clownillustraition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dastiplasti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'district1forherbold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotikfilmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotikshops24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erziehungsbeauftragung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmstream.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florens2010.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garagedoorservice.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant8718pharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingdianxs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgvitrakchayan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthahnsa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapiexpertise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mspclamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okumurak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhmsgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sectorexport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senile-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stachowskisausage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staedl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephan.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw40hx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swkjkmcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarifvergeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbreichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theambassador.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesniper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-newtype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordschecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sinnessprche-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yylnreveg.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b63cff214a37e4e184fae494729f668ad703dc84b2a43c38f08eb0af091ab81bafecb61499fff5251df1827e6152e11f7a966f394e064f91c45bec9527327fe58ea72f3023a3de560fa30e7942bb2545c5d4bbaa9f1ad095f4333349d5913af2d272c57b6afca50765a23ebe4fa178e7a9095bf7d7bb337c8dd1bc68190421dc1b6b349a0d4278cf4b5c587e186b688f1111784a47e0939e39627af6381268e80d73dcc6c367919c6973d3c1416603718d1fe3ec7e8ade93cb42d1482247d27b6cd62bdb2167472fb799e13dba9b030eedcc630686ffb2294bada7ba790acb339b79111fa0981ee0edca231bfb406275251f87898be73ae9d9d946ba1d6096ea