herig.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:97:eb:11:1d:77:d2:25:8f:10:79:bf:3d:3b:30:56:13 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=herig.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:97:eb:11:1d:77:d2:25:8f:10:79:bf:3d:3b:30:56:13
Serial Number (int): 341845430352883158041478838985819801277971
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:29:57:d8:32:cf:d0:06:3e:ee:b6:48:de:2c:f4:1c:84:7b:79:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:fa:6c:31:12:ac:9c:e7:ce:04:eb:26:a5:e9:89:9e:31:0a:e7:a2
Fingerprint (sha256): c3:e0:c3:be:7a:86:fc:af:71:85:96:7f:a2:43:7a:26:ed:c9:dd:53:5e:6a:32:99:e3:7f:d4:ed:0a:55:6c:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate herig.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for herig.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.770.com.au
*.applecenter.be
*.ara3.net
*.athabascahillsidemotel.net
*.autobaterien.de
*.browaergames.de
*.ceridianhre.co.uk
*.coalvilleacupuncture.co.uk
*.deckdesign.com.au
*.earrings.net.au
*.esundheitsinformation.de
*.examfeedback.net
*.galafrisuren.de
*.goldcoastphotographer.com.au
*.goldcoastshopfitters.com.au
*.herig.com.br
*.herzstechen.de
*.hilodaycheck.de
*.hotelbiarritz.com.br
*.inchcolm.com.au
*.iphonemoviez.net
*.japaneseclips.net
*.jojobaa.net
*.keyscrambler.de
*.kij.ca
*.kindergeldzuschlagsrechner.de
*.korbbetten.de
*.kortisonspritze.de
*.krin.org
*.kubotan.de
*.langtunig.de
*.makeasite.biz
*.mattressfactory.ca
*.miniskiphire.com.au
*.mobyline.it
*.nevertheless.icu
*.onlinexpert.com.au
*.pestscontrol.com.au
*.pkv-computervergleich.de
*.receitasdepanquecas.com.br
*.silversterlauf.de
*.string.com.au
*.switchgear.com.au
*.taev.de
*.texaswomanhealth.org
*.warehouseoutletaustralia.com.au
*.watchtvseries.it
*.willkits.com.au
*.xn--mrchenbasar-l8a.de
*.xn--schlerfotos-vhb.de
770.com.au
applecenter.be
ara3.net
athabascahillsidemotel.net
autobaterien.de
browaergames.de
ceridianhre.co.uk
coalvilleacupuncture.co.uk
deckdesign.com.au
earrings.net.au
esundheitsinformation.de
examfeedback.net
galafrisuren.de
goldcoastphotographer.com.au
goldcoastshopfitters.com.au
herig.com.br
herzstechen.de
hilodaycheck.de
hotelbiarritz.com.br
inchcolm.com.au
iphonemoviez.net
japaneseclips.net
jojobaa.net
keyscrambler.de
kij.ca
kindergeldzuschlagsrechner.de
korbbetten.de
kortisonspritze.de
krin.org
kubotan.de
langtunig.de
makeasite.biz
mattressfactory.ca
miniskiphire.com.au
mobyline.it
nevertheless.icu
onlinexpert.com.au
pestscontrol.com.au
pkv-computervergleich.de
receitasdepanquecas.com.br
silversterlauf.de
string.com.au
switchgear.com.au
taev.de
texaswomanhealth.org
warehouseoutletaustralia.com.au
watchtvseries.it
willkits.com.au
xn--mrchenbasar-l8a.de
xn--schlerfotos-vhb.de

Other certificates including the domain name herig.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for herig.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341845430352883158041478838985819801277971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 14:03:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 14:03:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'herig.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859043404192276605807810127172685644440568352560935099081569936035425919719946078659499086968193095394561743073275204979617903256368192129939251787612623990770764666107199767675815437002973236968390514431458760478084302264551267553150705771089978455886599331181293552873921684687749978157007328105918810529138805863836422278345090265922366298773675022601901043267544850759867909721104417530561702696541013807248579352428384855482547244934373293129275759587917818078769454862423705275887147482978373632024682373480183712281442549828531439028535415920841110391225710325578033958056426098161202913002055512789838289960719614340064158348564374773760612430255143592564436863812474697007408181873049907733512754563516316784041898265320446714863914170256253437809324452471718050445610077985461203016759091704289504056848626083462548789413512826347205930395956475988741689141494632092472512487391847196960594104886101733798474311178385737807550919739450070658480389457467696798211976904232728830715888721788637280079935072086864520149315283093452798709229106611233781963737099915253184091573136068027156256309570748412290283876478801110224017541249863301039656530441051870519810385941703270149143886716480249478705268533221498572710915525337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f52957d832cfd0063eeeb648de2cf41c847b798c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.770.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applecenter.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ara3.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athabascahillsidemotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autobaterien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.browaergames.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceridianhre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coalvilleacupuncture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deckdesign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earrings.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esundheitsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examfeedback.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galafrisuren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldcoastphotographer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldcoastshopfitters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herzstechen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilodaycheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelbiarritz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inchcolm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iphonemoviez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japaneseclips.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jojobaa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keyscrambler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kij.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kindergeldzuschlagsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.korbbetten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kortisonspritze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kubotan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.langtunig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeasite.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mattressfactory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miniskiphire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobyline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevertheless.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinexpert.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pestscontrol.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pkv-computervergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.receitasdepanquecas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silversterlauf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.string.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.switchgear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taev.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texaswomanhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warehouseoutletaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchtvseries.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willkits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mrchenbasar-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schlerfotos-vhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '770.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecenter.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ara3.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athabascahillsidemotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autobaterien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'browaergames.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceridianhre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalvilleacupuncture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deckdesign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earrings.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esundheitsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examfeedback.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galafrisuren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoastphotographer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoastshopfitters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herzstechen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilodaycheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelbiarritz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inchcolm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonemoviez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japaneseclips.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojobaa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyscrambler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kij.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindergeldzuschlagsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korbbetten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kortisonspritze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubotan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langtunig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeasite.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattressfactory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miniskiphire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobyline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevertheless.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinexpert.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestscontrol.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkv-computervergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receitasdepanquecas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silversterlauf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'string.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchgear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taev.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswomanhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouseoutletaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchtvseries.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willkits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mrchenbasar-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schlerfotos-vhb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170969f58b1000004030046304402207f9cfea243b8b0013bf10dbc084c9ab964da2368f3add44b00e596c29aae57dd02201f4afefb5539fd2f11048bb7ba6358fec73ad87f468b742dc4a1508b5b58c4c300770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170969f58d20000040300483046022100d2404bbd6932df7913d2952c462b44decc210633e08cf67135e93f119de15e0c022100d9cc42b6ab5ce58bc1fab4b44d10770cffc016a65c3cae8dd71d02bbff3c3286
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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