investmentplan.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:32:2f:72:90:ab:31:47:4e:f0:96:00:41:91:10:ad:74 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=investmentplan.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d4:32:2f:72:90:ab:31:47:4e:f0:96:00:41:91:10:ad:74
Serial Number (int): 333543427343917822853784153002104182582644
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:2f:37:a1:c7:e3:ec:18:5e:2f:72:dd:ef:2f:62:6a:8c:2a:01:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:98:7c:68:11:32:65:d0:5d:58:ae:f4:e9:ec:e9:34:f0:e3:63:fa
Fingerprint (sha256): c6:73:01:8d:d2:2c:e0:1d:d6:0f:69:cd:d0:dc:9c:b5:6c:e4:d1:c2:df:f0:27:1c:dd:5e:3b:4c:82:ac:a9:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate investmentplan.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for investmentplan.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alpha-1-antitrypsin-mangel.de
*.alzheier.de
*.appendix-vermiformis.de
*.aurum-chloratum-natronatum.de
*.bestpickleballshoes.com
*.camkitties.cc
*.computerfinancing.com.au
*.cotrimoxazol.de
*.crouzon-syndrom.de
*.ellis-van-creveld-syndrom.de
*.emissions.com.au
*.eupatorium-perfoliatum.de
*.fahrschuleonlinetest.de
*.falx-cerebri.de
*.fanasticshop.com
*.fashionaccord.com
*.fontecdn.com
*.formulaprestigemotors.co.uk
*.global-w-e-b.cn
*.hyperhydratation.de
*.investmentplan.co.za
*.jarisch-herxheimer-reaktion.de
*.kcal-tabelle.de
*.lasagne.co.za
*.legalnotice.com.au
*.liveact.com.au
*.mylegalshield.co
*.myotone-dystrophie-typ-1.de
*.mytaxcar.org
*.observations.com.au
*.ochronose.de
*.plasmodium-vivax.de
*.publiclaws.com.au
*.refinedunderpressure.com
*.remixpack.club
*.rinderschlachtung.de
*.roadmap.show
*.rsazea.de
*.schwalbenwurz.de
*.shop-programme.de
*.styling.com.au
*.swao.pro
*.swisshardwoods.co.uk
*.swyer-syndrom.de
*.taichidepot.com
*.vancouverrevivalcentre.com
*.vpreisvergleich.de
*.wundetax.de
*.wwwmaxgame.com
*.youdirtydog.info
alpha-1-antitrypsin-mangel.de
alzheier.de
appendix-vermiformis.de
aurum-chloratum-natronatum.de
bestpickleballshoes.com
camkitties.cc
computerfinancing.com.au
cotrimoxazol.de
crouzon-syndrom.de
ellis-van-creveld-syndrom.de
emissions.com.au
eupatorium-perfoliatum.de
fahrschuleonlinetest.de
falx-cerebri.de
fanasticshop.com
fashionaccord.com
fontecdn.com
formulaprestigemotors.co.uk
global-w-e-b.cn
hyperhydratation.de
investmentplan.co.za
jarisch-herxheimer-reaktion.de
kcal-tabelle.de
lasagne.co.za
legalnotice.com.au
liveact.com.au
mylegalshield.co
myotone-dystrophie-typ-1.de
mytaxcar.org
observations.com.au
ochronose.de
plasmodium-vivax.de
publiclaws.com.au
refinedunderpressure.com
remixpack.club
rinderschlachtung.de
roadmap.show
rsazea.de
schwalbenwurz.de
shop-programme.de
styling.com.au
swao.pro
swisshardwoods.co.uk
swyer-syndrom.de
taichidepot.com
vancouverrevivalcentre.com
vpreisvergleich.de
wundetax.de
wwwmaxgame.com
youdirtydog.info

Other certificates including the domain name investmentplan.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for investmentplan.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333543427343917822853784153002104182582644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 21:44:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 21:44:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'investmentplan.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825912849543771375233155418827648106041075472526815451648534194503945567924091444850052740752035917370750866943191278075984380154587974998439154033939659013719824104531040873291753684648190124542563928088843498615523523010515557470762974309894070437335508756494766901642476749948737714034017011553803285057133222916263519157580630983417767997398194080218895852824957592710771882149479658547805791881865921089878663546041095097769329709918529375372945206628600896670051781815463493917330736396368223954763984684118449078312323816917922420457975641157780290280900924884132658801969714175139561928324668806816708606946937075363609480179499330616452648580784901309196997945465194167166191662307673213540189874079822904577392601936820976165003866192259121844474156157541320844574523928335713511160240485794075240669899243993152907040783806022507538758545825097471691939578781734421804916609443982638421619715548826288271398499743901319778813439431708095637792337969264795300488802158499389443811412182029566229441024604049060787007072746904812340811557320933863120577445591300836030070732580878123183527458087590804962754070379175158570516426471211470353443983497772714393077261083646107669891624158471378289588968814715614058788571365243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							322f37a1c7e3ec185e2f72ddef2f626a8c2a01fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha-1-antitrypsin-mangel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alzheier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appendix-vermiformis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurum-chloratum-natronatum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestpickleballshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camkitties.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computerfinancing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cotrimoxazol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crouzon-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellis-van-creveld-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emissions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eupatorium-perfoliatum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fahrschuleonlinetest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.falx-cerebri.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanasticshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionaccord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formulaprestigemotors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.global-w-e-b.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyperhydratation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investmentplan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jarisch-herxheimer-reaktion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcal-tabelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasagne.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legalnotice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveact.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylegalshield.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myotone-dystrophie-typ-1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytaxcar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.observations.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ochronose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plasmodium-vivax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publiclaws.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refinedunderpressure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remixpack.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rinderschlachtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadmap.show'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rsazea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwalbenwurz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop-programme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.styling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swao.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swisshardwoods.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swyer-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taichidepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vancouverrevivalcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vpreisvergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wundetax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmaxgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youdirtydog.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha-1-antitrypsin-mangel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alzheier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appendix-vermiformis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurum-chloratum-natronatum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpickleballshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camkitties.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computerfinancing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotrimoxazol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crouzon-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellis-van-creveld-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emissions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eupatorium-perfoliatum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahrschuleonlinetest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falx-cerebri.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanasticshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionaccord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulaprestigemotors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global-w-e-b.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyperhydratation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentplan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarisch-herxheimer-reaktion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcal-tabelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasagne.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalnotice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveact.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegalshield.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myotone-dystrophie-typ-1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytaxcar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'observations.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ochronose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasmodium-vivax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publiclaws.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refinedunderpressure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remixpack.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinderschlachtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadmap.show'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsazea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwalbenwurz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-programme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swao.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisshardwoods.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swyer-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taichidepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouverrevivalcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpreisvergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wundetax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmaxgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youdirtydog.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f64aded1e0000040300483046022100e1e59f1d1bb3f7d0df3bfc2739d5a59f478e0a91bcaadb45255b1005c2a9a41d022100a92b799bee307e078be1615efdeec3e3db81cd06fe1319dfed03c58d53f490c30076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f64adede7000004030047304502207f6d5398649b005f873d42b0c94bae936e523e3152b062db6f8275afc00e0e8e022100cb6661a7fec2522537b195df28b970e6cfc0d73870951ffa885cf5b7eb24388a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a82cbfb364fc52d337b903a6de814ca52dfbf9ed8d1050dac94af0ca7829010e32cee4d92201b27a17ed85d7f9d1c03069b94044266b3b4069275fecd890d1f92ee6dd6a4a434bebe9bc5a65f175f4083c7bbeaaf1db00287b0febf747871bc093e058b4854401b55f8ce453bdce3e000bf7851ca2a89ad17436adafefda116eb719ff5efac74c2a85973bfd7132a4e6ac29fe154f87fca90616ca7a23e747df936afd3eac1f9b6a354856966bbf06fa6d65333b184392c4b9f7fb24ab74158df27f63e705d56a1d7ed1c8d03b344a2f07dba1447a339630b94d805c82066aeb76c46906e8e7c15958559af4e9b660cdf6f5c3db1a2d32864d83ab6c63103a5