soda.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:60:ce:eb:26:58:8c:16:92:36:a2:e1:b6:2d:58:33:e2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=soda.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:60:ce:eb:26:58:8c:16:92:36:a2:e1:b6:2d:58:33:e2
Serial Number (int): 299577163160578389016812740385368345949154
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:67:21:49:f0:af:bc:3c:07:9d:44:96:4e:31:b3:55:24:30:8b:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:d8:08:fd:18:05:a0:8b:41:5e:01:cb:92:3e:12:1d:81:c0:64:7e
Fingerprint (sha256): cb:5e:6f:35:e1:a3:db:f6:0f:a0:8e:92:39:db:d9:fe:a9:3f:03:3b:22:8e:cd:2a:fd:9c:2e:1c:39:61:48:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate soda.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soda.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.austinknollvineyard.net
*.autiomobile.de
*.baumaschinen24.de
*.bnlbusinessway.it
*.bodybuilder.com.au
*.bullwinkle.us
*.coachingfederation.org
*.coloradan.net
*.cordlessphone.de
*.disabilityequipment.de
*.discountbedding.com.au
*.doughnuts.co.za
*.ebay-kleinanzeigewn.de
*.ebay-kleinanzeigrn.de
*.ebay-kleinanzeigsen.de
*.ebay-kleinanzseigen.de
*.ebay-kleinazigen.de
*.etf.onl
*.eventsfashion.com.au
*.fetishes.com.au
*.few.com.au
*.foofwatch.de
*.gambia.de
*.gch.us
*.gesundheitsinformatin.de
*.gesundheitt.de
*.gesundhietsinformation.de
*.gesundhwit.de
*.gettune.ru
*.jogoshalloween.com.br
*.kostenlos-filme-downloaden.de
*.nacktyoga.de
*.namoracomigo.com.br
*.o2onlined.de
*.oarl.de
*.omahacraigslist.org
*.ourselves.org
*.parts.com.au
*.platin-kreditkarten.de
*.social-house.info
*.soda.co.za
*.somosperfeitas.com.br
*.southwesttrainsinfo.co.uk
*.starswithoutmakeup.net
*.swtern.de
*.theallisonhotel.net
*.thepopupbridalboutique.co.uk
*.vico.es
*.wissenstests.de
*.xn--schnrpumps-deb.de
austinknollvineyard.net
autiomobile.de
baumaschinen24.de
bnlbusinessway.it
bodybuilder.com.au
bullwinkle.us
coachingfederation.org
coloradan.net
cordlessphone.de
disabilityequipment.de
discountbedding.com.au
doughnuts.co.za
ebay-kleinanzeigewn.de
ebay-kleinanzeigrn.de
ebay-kleinanzeigsen.de
ebay-kleinanzseigen.de
ebay-kleinazigen.de
etf.onl
eventsfashion.com.au
fetishes.com.au
few.com.au
foofwatch.de
gambia.de
gch.us
gesundheitsinformatin.de
gesundheitt.de
gesundhietsinformation.de
gesundhwit.de
gettune.ru
jogoshalloween.com.br
kostenlos-filme-downloaden.de
nacktyoga.de
namoracomigo.com.br
o2onlined.de
oarl.de
omahacraigslist.org
ourselves.org
parts.com.au
platin-kreditkarten.de
social-house.info
soda.co.za
somosperfeitas.com.br
southwesttrainsinfo.co.uk
starswithoutmakeup.net
swtern.de
theallisonhotel.net
thepopupbridalboutique.co.uk
vico.es
wissenstests.de
xn--schnrpumps-deb.de

Other certificates including the domain name soda.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for soda.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299577163160578389016812740385368345949154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 09:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 09:08:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soda.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882756068730482985725847448541857546983011218298509568133153030697045386821132516136968044030067600027989105436066919802219909776434328892024797546637236736412788295818142251590889203794088296330509578060578231591020731638757830141391478457535211860324667547372276388296698940426999243633850778193135844469559185822920289284204140884693741607125603408486730830968538849593013424703204122199598304929548399155938949695995885428651640695286919174242781564575604710410533883970815240716824534604851991044481451487272390530494911372102699241579402147029063661428953895900996730209172740323559570740694218422236084471784306642530604663372656764794513483286375282965654224441942323609871218413610815971748476485508262286646818273073899462444494266354678306127285199265623940553569700021350936788500589123989127427496482897698433918017361262956475004299506376995186944952894850038737576377070866575669356465910896611638464200429320587846974776255077746803955835841026294766355845502416569755872948974234072990810703443795921040697554052132912185840649731240652084064103147590529245308715583391304058886274172329371953884513226396574926460933409120615091909281961965791988129459393130371986984010914538228500452522196085612816236161376509701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21672149f0afbc3c079d44964e31b35524308b4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinknollvineyard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autiomobile.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baumaschinen24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnlbusinessway.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodybuilder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bullwinkle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coachingfederation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coloradan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cordlessphone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disabilityequipment.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discountbedding.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doughnuts.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanzeigewn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanzeigrn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanzeigsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanzseigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinazigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etf.onl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eventsfashion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetishes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.few.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foofwatch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gambia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundheitsinformatin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundheitt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundhietsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundhwit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gettune.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jogoshalloween.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kostenlos-filme-downloaden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nacktyoga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namoracomigo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o2onlined.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oarl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omahacraigslist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourselves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platin-kreditkarten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.social-house.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soda.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somosperfeitas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwesttrainsinfo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starswithoutmakeup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swtern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theallisonhotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepopupbridalboutique.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wissenstests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnrpumps-deb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinknollvineyard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autiomobile.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baumaschinen24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnlbusinessway.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodybuilder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullwinkle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachingfederation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cordlessphone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disabilityequipment.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discountbedding.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doughnuts.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanzeigewn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanzeigrn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanzeigsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanzseigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinazigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf.onl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventsfashion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetishes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'few.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foofwatch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gambia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundheitsinformatin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundheitt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundhietsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundhwit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettune.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jogoshalloween.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostenlos-filme-downloaden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacktyoga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namoracomigo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2onlined.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oarl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omahacraigslist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourselves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platin-kreditkarten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-house.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soda.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somosperfeitas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwesttrainsinfo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starswithoutmakeup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swtern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theallisonhotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepopupbridalboutique.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissenstests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnrpumps-deb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f0e2dd467000004030047304502204425923b584284c688d76c4313c625c053153e6c0eca59a33baf294f9c264371022100d59bd48c55d51f6f74198934dec7bf89ffe520938f25e89bb7ac55475a7d2fb900770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0e2dd4970000040300483046022100fe24593a7be633eb59540dde01f40f061f06f646bbbf6cfca85ec175aad0ecbb022100ca2e40021103fb427db1aba20236e38572c0bfdda929f94e1308ad19a859aa39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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