diycraftti.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:d3:b2:36:65:b3:ae:3c:1f:3b:22:84:c8:bf:25:1b:a2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=diycraftti.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:d3:b2:36:65:b3:ae:3c:1f:3b:22:84:c8:bf:25:1b:a2
Serial Number (int): 330355288352569517472873584782417452145570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:cd:bb:39:eb:3a:e0:27:05:ba:43:ee:81:7a:1a:9c:90:9c:04:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:16:b7:6d:03:bc:24:96:3a:12:99:04:de:cf:b0:c1:0c:3a:ad:ea
Fingerprint (sha256): df:11:86:0b:58:80:18:05:fe:19:09:27:dc:61:1f:90:b8:f7:ee:ba:db:a5:15:eb:27:83:d7:84:b1:f1:5f:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate diycraftti.me

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diycraftti.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.apotheken-umschaude.de
*.bbyte.es
*.bestoutdoorgear.co
*.biathlon-anholz.it
*.biomembran.de
*.bozo.org
*.bulletins.info
*.byronbayfitness.com.au
*.caixacartoes.com.br
*.chiropracticpillow.com.au
*.coitus-interruptus.de
*.comcost.net
*.diycraftti.me
*.dry-pak.co.uk
*.eiskaffe.de
*.emanuela.com.br
*.eversicherungen.de
*.extortionist.net
*.ferienwhnungen.de
*.flaschendesign.de
*.fraulein38.it
*.freedown.co
*.french-torrent.fr
*.gpsdevices.de
*.helicopter-game.de
*.heracles.com.br
*.heulkraeuter.de
*.hnr.us
*.itonic.org
*.jungjaeger.de
*.kamerarucksack.de
*.ketonon.cf
*.kosherfoodtruck.ca
*.madih.de
*.magnet-camif.cz
*.mauve.com.au
*.ohmsches-gesetz.de
*.oveckapenzion.cz
*.pointx.it
*.procamera.com.au
*.projektberatung.de
*.prozentrechnungen.de
*.qnq.me
*.salon-radka.cz
*.spotrza.be
*.superwindows.cz
*.thedeep.com.au
*.theplan.com.au
*.urn.cz
*.xn--mundfule-4za.de
apotheken-umschaude.de
bbyte.es
bestoutdoorgear.co
biathlon-anholz.it
biomembran.de
bozo.org
bulletins.info
byronbayfitness.com.au
caixacartoes.com.br
chiropracticpillow.com.au
coitus-interruptus.de
comcost.net
diycraftti.me
dry-pak.co.uk
eiskaffe.de
emanuela.com.br
eversicherungen.de
extortionist.net
ferienwhnungen.de
flaschendesign.de
fraulein38.it
freedown.co
french-torrent.fr
gpsdevices.de
helicopter-game.de
heracles.com.br
heulkraeuter.de
hnr.us
itonic.org
jungjaeger.de
kamerarucksack.de
ketonon.cf
kosherfoodtruck.ca
madih.de
magnet-camif.cz
mauve.com.au
ohmsches-gesetz.de
oveckapenzion.cz
pointx.it
procamera.com.au
projektberatung.de
prozentrechnungen.de
qnq.me
salon-radka.cz
spotrza.be
superwindows.cz
thedeep.com.au
theplan.com.au
urn.cz
xn--mundfule-4za.de

Other certificates including the domain name diycraftti.me

(limited to 100 certificates)
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
clientes.de
papsmear.com.au
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
diycraftti.me
papsmear.com.au
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com
sni60303.cloudflaressl.com

Certificate

The complete raw certificate details for diycraftti.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330355288352569517472873584782417452145570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 09:25:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 09:25:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diycraftti.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770832274173363841810546599492358224942924215590735255734226279115331680036448210174750338925678777312482590973725898173869353043733543615220958779915382489715945630754133539389120568614330097374884087895094835731046021905647671486703278328406725014665748709909382033064648811392062729603001218209561847698417476202253600062457469042242844240477251175926174859434355655021479524213235733882136699791460644031462485505854174598491509869798984843803689693479721502137732020854486735158189828291896385636765161297871810658878887112516687729955940767363927345787196067303617303849455293361607240962431438658461142357898397483677050142757593176176882686113065766162148927961606567519030267373801843138904804798962785890975130273957425784597643146951458890233394983326600741524940673383114719112585181275707628304175023306197378872538717805672795259126048308805668737360121465947782972096458507111999954593741594684662610368862086135303598304802970406228613646810995718410232127221371484811334563986711067163009877266579491955768660000943271473368346715651971403007013562543686972314377726342232731038345499153374030212746953938189668928772980038042315966298719719373122499415676667359300947969144185856476788479114064383314919588306497639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ccdbb39eb3ae02705ba43ee817a1a9c909c04d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1754 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apotheken-umschaude.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbyte.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestoutdoorgear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biathlon-anholz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biomembran.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bozo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulletins.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byronbayfitness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caixacartoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiropracticpillow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coitus-interruptus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comcost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diycraftti.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dry-pak.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eiskaffe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emanuela.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eversicherungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extortionist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferienwhnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaschendesign.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fraulein38.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedown.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.french-torrent.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpsdevices.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helicopter-game.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heracles.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heulkraeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hnr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itonic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jungjaeger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamerarucksack.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketonon.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kosherfoodtruck.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madih.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnet-camif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mauve.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohmsches-gesetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oveckapenzion.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pointx.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procamera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projektberatung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prozentrechnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qnq.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salon-radka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotrza.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superwindows.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedeep.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theplan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urn.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mundfule-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotheken-umschaude.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbyte.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestoutdoorgear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biathlon-anholz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biomembran.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bozo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulletins.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byronbayfitness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caixacartoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiropracticpillow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coitus-interruptus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diycraftti.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dry-pak.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eiskaffe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emanuela.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eversicherungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extortionist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienwhnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaschendesign.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraulein38.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedown.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french-torrent.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpsdevices.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helicopter-game.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracles.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heulkraeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itonic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jungjaeger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamerarucksack.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketonon.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosherfoodtruck.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madih.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnet-camif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauve.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohmsches-gesetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oveckapenzion.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointx.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procamera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projektberatung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prozentrechnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qnq.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salon-radka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotrza.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superwindows.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedeep.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urn.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mundfule-4za.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001695cd6360b0000040300463044022078c1ad90beee63af72ba9adefee82e0378ca3019a48cc44a6052dd9c5af55ad0022059752e894dc5bdf01202095c259d2701394e51d49638d0c38c21e23af8a80acf00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001695cd6383d000004030047304502203c69bb48e4218c127e437badf29524d77deaf084c531fbebd20135ce1b3a0aae022100d9d06bef0380cbfc8028d9855202fd099235de489d1819e00c0f6a0d773ab759
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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