riekehelmers.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:04:02:b0:b0:11:c7:88:81:76:c5:24:bd:31:df:cc:5a:1a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=riekehelmers.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:02:b0:b0:11:c7:88:81:76:c5:24:bd:31:df:cc:5a:1a
Serial Number (int): 262701563134315887302812227308878526437914
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:48:41:84:a8:15:e6:92:28:e8:da:4c:43:ba:08:8d:e9:9d:9a:ff
Fingerprint (sha256): dc:ac:de:f8:f4:6b:49:22:a4:99:7d:62:77:91:34:70:20:22:50:f4:af:81:f1:c3:c8:c8:5f:a4:f2:86:ed:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate riekehelmers.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for riekehelmers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2016.yearendreview.co
admin.andamiaje.co
agile-cards-trello.spartez.com
agnitehealth.com
amazingbeauty.pl
ambuj.tech
anketa.most-hid.sk
app.chau.jp
app.graphiscomunicacao.com.br
app.texponential.com
assets.nowims.com
beta.stepfood.com
bloggiamcan.life
bspk.design
buildman.co.jp
celtic-zen.fr
coinconnect.in
coldsense.zicam.com
cryos.in
denzity.io
dev.hop.optelgroup.com
felipeduartedev.tech
fire.entu.eu
glare.fm
guitar-patterns.com
healthicare.planl.nl
horizonitsolutions.com.au
iotdemo.soepriatna.com
isaackoh.com
itkloud.com
joekt.me
kanban.zenavilenia.com
loan-v-lease.com
mergeconf.fibato.com
multirater-rating.talentlytica.com
news.mongollist.com
notes.runhangz.com
office-test.sah-sh.ch
office-v1.sah-sh.ch
organize.sporfy.com
overhyped.ml
powerstrip.texponential.com
ppl.syunsukekobashi.co
purposemovement.ie
qaricorner.com
retail-winners.com
riekehelmers.com
robbieshock.com
schoolze.com
schweiz.avdis.ch
social-winnings.com
staging.vba-blocks.com
systems.salesloft.com
tadanochat.club
tags.shamanland.com
techcookbook.com
thebeeskneesvintagebar.com
theflybikes.com
thijsvanlienen.nl
trends.reviu.tv
unusuallabs.com
upload.smartmidiafotos.com.br
video.shoait.com
view.superinfo.com.au
virginia-und-michi.de
vizmo.in
www.alexandramalysheva.ru
www.amazingbeauty.pl
www.arex.io
www.blueprintcss.io
www.candidato.ninja
www.gopremios.com.br
www.healthicare.planl.nl
www.horsecareapp.com
www.hungryclub.com.br
www.inspeko.com
www.itkloud.com
www.joekt.me
www.kangaruu.com
www.karrichristieinteriors.com
www.lifeparty.co.nz
www.linguajam.org
www.marcreichelt.de
www.movementlo.com
www.offgen.net
www.phanib.com
www.playlistr.org
www.qaricorner.com
www.rickandmortyminesweeper.com
www.riekehelmers.com
www.rosperday.com
www.skndungudevs.com
www.stockmon.xyz
www.techcookbook.com
www.theartofsilence.org
www.virginia-und-michi.de
www.vizmo.in
www.yamakadi.com
www.zevvle.com
zsuzsa.cgwebsites.net

Other certificates including the domain name riekehelmers.com

(limited to 100 certificates)
riekehelmers.com
www.codey.co
www.4pixel.app
www.xn--agilitt-messen-bib.de
riekehelmers.com
www.delf.com.br
www.oxeye.ai
galacticpigeon.com
beta.app.logbee.com.br
tokensale.beachheadico.com
admin.testshopping.a-sta.com
nhlrecaps.com
cv.riekehelmers.com
prashantbarve.com
riekehelmers.com
www.luffanet.com
agile-leader.co
lara.riekehelmers.com
drafti.io
dev.akses.at
www.driveflow.co.uk
data.riekehelmers.com
www.ridl.app
studion.co
mrelbank.com
test.riekehelmers.com
www.ashutoshsingh05.co
riekehelmers.com
made-in.africa
admin.cloudleft.ie
riekehelmers.com
arpitgandhi.dev
mapp.hpinfosys.com
www.lafetep.com
a3oad.website

Certificate

The complete raw certificate details for riekehelmers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262701563134315887302812227308878526437914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 20:13:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 20:13:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'riekehelmers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2002 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2016.yearendreview.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.andamiaje.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agile-cards-trello.spartez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agnitehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazingbeauty.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambuj.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anketa.most-hid.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.chau.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.graphiscomunicacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.texponential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.nowims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.stepfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloggiamcan.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bspk.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildman.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celtic-zen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinconnect.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coldsense.zicam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryos.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denzity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hop.optelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felipeduartedev.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.entu.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glare.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitar-patterns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthicare.planl.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizonitsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotdemo.soepriatna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isaackoh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joekt.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanban.zenavilenia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loan-v-lease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mergeconf.fibato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multirater-rating.talentlytica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.mongollist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notes.runhangz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-test.sah-sh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-v1.sah-sh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organize.sporfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overhyped.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerstrip.texponential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppl.syunsukekobashi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purposemovement.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaricorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail-winners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riekehelmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbieshock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schweiz.avdis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-winnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.vba-blocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systems.salesloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadanochat.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.shamanland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeeskneesvintagebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theflybikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thijsvanlienen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trends.reviu.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unusuallabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.smartmidiafotos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.shoait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.superinfo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginia-und-michi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vizmo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexandramalysheva.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazingbeauty.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blueprintcss.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candidato.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gopremios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthicare.planl.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horsecareapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hungryclub.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspeko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itkloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joekt.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kangaruu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karrichristieinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeparty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linguajam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcreichelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movementlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offgen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phanib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playlistr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaricorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rickandmortyminesweeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riekehelmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosperday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skndungudevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockmon.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techcookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartofsilence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virginia-und-michi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vizmo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yamakadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zevvle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zsuzsa.cgwebsites.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167b3b7ea6900000403004730450220521bb65dcdb64a951d911edad79d92a6a5d233456323a7997525005a562650d8022100d045013315c1ec3cdc29ce72ff5a5ea18ddbc219b0ab1170fb1d8dd59b0cf2de00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167b3b7eab3000004030046304402206810b60690e229d17896894a40319595a0f83cbaaeab735b8437b19983df38f802207e2d34d5b75beaab8133db1e51953c0f436f3acc230f44b21ddc59e165eec035
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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