cityguides.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:33:ce:88:dc:a3:bd:04:6a:54:d0:46:31:34:c6:09:5b:2c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cityguides.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:ce:88:dc:a3:bd:04:6a:54:d0:46:31:34:c6:09:5b:2c
Serial Number (int): 278965790102855856280766942284470303677228
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:e4:2a:66:0d:c5:93:82:47:16:16:c8:af:9b:d3:6f:18:53:5a:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:b4:7c:d3:7b:a7:1f:1c:94:a8:af:b9:27:a6:99:21:76:cd:f9:cb
Fingerprint (sha256): c5:ff:71:c0:c5:48:a1:da:a4:ef:5f:62:0b:c9:7c:99:17:7e:1b:d8:02:ca:43:6d:e4:c2:eb:9f:b4:c3:a1:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cityguides.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cityguides.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a-o.be
*.amorehaus-esslingen.de
*.anklebrace.com.au
*.bestpins.uk
*.boathousegear.com
*.cityguides.com.au
*.esmithtreeservices.co.uk
*.ewenique.co.uk
*.flipchartpapier.de
*.fortuna-u.com
*.futurertools.com
*.garman.com.au
*.gesund-durch-radfahren.de
*.gezapftes.de
*.girdharbisht.com
*.hamstekiste.de
*.highvoltageblog.net
*.hundesocken.de
*.imftxplay.net
*.immoscott.de
*.irewards.in
*.linsmani.com
*.manealliv.com
*.members-test1.com
*.mmydealz.de
*.motovaconline.com
*.nanadstore.com
*.oliviahellen123.com
*.omnidentalsupplys.com
*.ozontetel.com
*.personaproduzioni.com
*.ql.co.za
*.radboudreshapecenter.com
*.righnowmedia.org
*.ro-shaders.com
*.smokehousevapez.com
*.strengthalabamaholmes.com
*.theironingcompanyglasgow.co.uk
*.thewebmagazin.com
*.trendswalut.com
*.vhcuupdates.com
*.warriorlikeus.com
*.waterbcohio.us
*.whymortgagesuck.com
*.wwwamorelie.de
*.xn--absperrzune-s8a.de
*.xn--frherschein-thb.de
*.xn--orientalische-mbel-r3b.de
*.xn--schuhversandhuser-2qb.de
*.zbotancialsapothecary.com
a-o.be
amorehaus-esslingen.de
anklebrace.com.au
bestpins.uk
boathousegear.com
cityguides.com.au
esmithtreeservices.co.uk
ewenique.co.uk
flipchartpapier.de
fortuna-u.com
futurertools.com
garman.com.au
gesund-durch-radfahren.de
gezapftes.de
girdharbisht.com
hamstekiste.de
highvoltageblog.net
hundesocken.de
imftxplay.net
immoscott.de
irewards.in
linsmani.com
manealliv.com
members-test1.com
mmydealz.de
motovaconline.com
nanadstore.com
oliviahellen123.com
omnidentalsupplys.com
ozontetel.com
personaproduzioni.com
ql.co.za
radboudreshapecenter.com
righnowmedia.org
ro-shaders.com
smokehousevapez.com
strengthalabamaholmes.com
theironingcompanyglasgow.co.uk
thewebmagazin.com
trendswalut.com
vhcuupdates.com
warriorlikeus.com
waterbcohio.us
whymortgagesuck.com
wwwamorelie.de
xn--absperrzune-s8a.de
xn--frherschein-thb.de
xn--orientalische-mbel-r3b.de
xn--schuhversandhuser-2qb.de
zbotancialsapothecary.com

Other certificates including the domain name cityguides.com.au

(limited to 100 certificates)
ewenique.co.uk
cityguides.com.au
brisbaneport.com.au
ewenique.co.uk
cityguides.com.au
ewenique.co.uk
hamstekiste.de
cityguides.com.au
xn--absperrzune-s8a.de
afdodlodging.net
xn--fotohintergrnde-bwb.de

Certificate

The complete raw certificate details for cityguides.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278965790102855856280766942284470303677228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 12:14:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 12:13:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cityguides.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689779598916663780773748681206348796325456333647636216116487964290525721426793231966829383883952927329324065574056005093186736441228558048813876982354849464550325763875664861514230226421249579585700345585339177579034878940617890832848101356630429235116719297377585003838314889905438148908012745078313929354226176563220386963828207575986714524542241187216158436038198615043370530673338313131093680419111163861950695424255906866819470302807710380758750380798692348572330679311468770430646782749755709592010434072244610861098527484319608671094386989563926846724729325489115311650693748115871131341173368739852747999815166163830885056338854507280396378001262399618017720090346842501478244608564591702963307860363747251448615384736249371614767507378127871431355650994080117403529238209176308541204287007368855466747464761937660663120196062774868074519063613436395166629194805363083002293372633837120608950112495451278394669371340486646703817865270567804877092291357281395381199039205599735139385199532391311508733625233989045238943776675773379677030084316935421877720944207291083272468681306203507401062469948974357290954299542779271820951078617707426267604183212849389868540682425550986487538188043326359271951384736525190536019315183677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76e42a660dc59382471616c8af9bd36f18535a0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2014 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-o.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amorehaus-esslingen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anklebrace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestpins.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boathousegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityguides.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esmithtreeservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ewenique.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipchartpapier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortuna-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futurertools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesund-durch-radfahren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gezapftes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girdharbisht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamstekiste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highvoltageblog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hundesocken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imftxplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immoscott.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irewards.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linsmani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manealliv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.members-test1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmydealz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motovaconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanadstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oliviahellen123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omnidentalsupplys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ozontetel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personaproduzioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ql.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radboudreshapecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.righnowmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ro-shaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smokehousevapez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strengthalabamaholmes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theironingcompanyglasgow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewebmagazin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendswalut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vhcuupdates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warriorlikeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterbcohio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whymortgagesuck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwamorelie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--absperrzune-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frherschein-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--orientalische-mbel-r3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schuhversandhuser-2qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zbotancialsapothecary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-o.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amorehaus-esslingen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anklebrace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpins.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boathousegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityguides.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esmithtreeservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewenique.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipchartpapier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortuna-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurertools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesund-durch-radfahren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gezapftes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girdharbisht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamstekiste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highvoltageblog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hundesocken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imftxplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immoscott.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irewards.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linsmani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manealliv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members-test1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmydealz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motovaconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanadstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oliviahellen123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnidentalsupplys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozontetel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personaproduzioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ql.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radboudreshapecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'righnowmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro-shaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokehousevapez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strengthalabamaholmes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theironingcompanyglasgow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewebmagazin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendswalut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhcuupdates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorlikeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterbcohio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whymortgagesuck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwamorelie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--absperrzune-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frherschein-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--orientalische-mbel-r3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schuhversandhuser-2qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbotancialsapothecary.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b2405c680000004030047304502203b6589008da3a9c52a895bb48f82a85f287e51a8517d80e8624ec362fa5c5dbc022100873ef3f114e6510dc80b3c5271dc06becc3dce13c91346352eed459edc28447600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b2405c6be0000040300473045022100e0c7d5e466a86860ab30f95b9090ef275505725c89116f15b8dc52d25349448d02207c1b13a4cf82c1ed3e5361144762c707f9f3546e2413fd281f9d86a4eb3ee35a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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