nung-av.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:4f:cc:82:58:6c:18:f2:39:41:70:29:10:f9:59:a8:dd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nung-av.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:4f:cc:82:58:6c:18:f2:39:41:70:29:10:f9:59:a8:dd
Serial Number (int): 269609705485328193836909971485489058392285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:8d:c8:c8:bc:0c:a5:e7:a4:97:3d:31:5f:34:f1:86:ed:4f:29:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:14:47:bb:02:60:17:87:6c:19:0e:6f:83:25:b4:b8:8b:de:a7:43
Fingerprint (sha256): d9:33:9b:c7:19:af:a4:d4:a0:ed:e6:30:05:5d:86:55:a5:2c:03:ec:72:69:bf:5e:ad:f6:4c:8d:15:f1:9a:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nung-av.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nung-av.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123movies.ru
*.addfreewebsite.com
*.anypay.fr
*.arbenfits.org
*.automotivechecks.com
*.bhaduri.com
*.bilera.com
*.c2q.ru
*.cantoro.com
*.catacumba.com
*.clemy.ru
*.dagpleje.com
*.empowercreditunion.com
*.filesgeter.ru
*.flashcharts.com
*.francopoly.com
*.gaspod.ru
*.globinclick.com
*.hacg.ch
*.hartdord.com
*.henrypeeters.com
*.ins666.com
*.iwatch6.com
*.lonetparflanbe.ru
*.mang.as
*.maryland-investigators.com
*.mimgky.net
*.mjrz.net
*.nung-av.com
*.onmangequoi.com
*.orayan.com
*.pasters.cc
*.pinehursthomeowners.org
*.prettylittleething.com
*.procuradora.com
*.republiek.com
*.retinamacbook.com
*.sanitarios.org
*.shoespie.co
*.suryawan.com
*.thegoals.com
*.trigala.com
*.trukers.com
*.tucumple.com
*.unyil.com
*.wesener.com
*.wlastminute.com
*.womenswealth.org
*.xn--fschilddrsenunterfunktion-nwc.de
*.yesflix.eu
123movies.ru
addfreewebsite.com
anypay.fr
arbenfits.org
automotivechecks.com
bhaduri.com
bilera.com
c2q.ru
cantoro.com
catacumba.com
clemy.ru
dagpleje.com
empowercreditunion.com
filesgeter.ru
flashcharts.com
francopoly.com
gaspod.ru
globinclick.com
hacg.ch
hartdord.com
henrypeeters.com
ins666.com
iwatch6.com
lonetparflanbe.ru
mang.as
maryland-investigators.com
mimgky.net
mjrz.net
nung-av.com
onmangequoi.com
orayan.com
pasters.cc
pinehursthomeowners.org
prettylittleething.com
procuradora.com
republiek.com
retinamacbook.com
sanitarios.org
shoespie.co
suryawan.com
thegoals.com
trigala.com
trukers.com
tucumple.com
unyil.com
wesener.com
wlastminute.com
womenswealth.org
xn--fschilddrsenunterfunktion-nwc.de
yesflix.eu

Other certificates including the domain name nung-av.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nung-av.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269609705485328193836909971485489058392285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 00:54:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 00:54:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nung-av.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925454005624660257677910487987925813479744374801238718527589567657422593583504058429174675240369600415570393615594794336082739145087721168650684334546976208597967784790446968156106183625393618353589936592732432933962101446429281520469378819345177808288535980867300597825118524216534734013681518969511528088822692601760792610741706200437655830127749317174246550926288907460063108559786177199721911102328922692482333781357295334962938931033113124853778770816145977961756570959017767327683311714896947624630410726705457559205718990830537907676060702347229328517467543214682322531206944005217606947262761747644042563514995003804000804866309132175767417834137753140877409268683033222488506877997271105898765624464062955363781771573923377042754249494379068228845681820598647150302693699738493015171867878732790242619572591204797869296543858759177718462220349904057293466714206528898334384132843142089596428009835811064754750689082309396378096791593037664858760152788968664447111702106247849705799120058807150523466492713482526425379056936435221318585871761585171201419277257673094504961235555377431415976949869841794603785367688258515966373213091563786576686752780437308739741719689998839376194742366915599752210021058945965690956551161063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							408dc8c8bc0ca5e7a4973d315f34f186ed4f29c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123movies.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addfreewebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anypay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbenfits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automotivechecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhaduri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bilera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c2q.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cantoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catacumba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clemy.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dagpleje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empowercreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filesgeter.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flashcharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.francopoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaspod.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globinclick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hacg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartdord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henrypeeters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ins666.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwatch6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonetparflanbe.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mang.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maryland-investigators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mimgky.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mjrz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nung-av.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onmangequoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasters.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinehursthomeowners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prettylittleething.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procuradora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.republiek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retinamacbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanitarios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoespie.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suryawan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegoals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trigala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trukers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tucumple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unyil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wesener.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wlastminute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenswealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fschilddrsenunterfunktion-nwc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesflix.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123movies.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addfreewebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anypay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbenfits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automotivechecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhaduri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2q.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catacumba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clemy.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dagpleje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowercreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filesgeter.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashcharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francopoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaspod.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globinclick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hacg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartdord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henrypeeters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ins666.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwatch6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonetparflanbe.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mang.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maryland-investigators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimgky.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjrz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nung-av.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onmangequoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasters.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinehursthomeowners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prettylittleething.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procuradora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republiek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retinamacbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanitarios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoespie.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suryawan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trigala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trukers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucumple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unyil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesener.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlastminute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenswealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fschilddrsenunterfunktion-nwc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesflix.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b8c5725450000040300473045022100f8a80cf5605795cb508513f6de41188830f849e15ace6cc7368a17390d7a50c90220127cb6411aa54b6932170af5da1cfe74c500a54914f4df3756af520583c865d0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b8c5723bc0000040300483046022100959e6a5fa4bb6560e177cfac29b7ca5818ea3021370bb5dd01f19eb90d72c372022100f557e84b35c86d979680cda70cd22192434c485036a1b018c6a196d9ea11119c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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