kfww.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:34:4b:84:f5:1a:c8:48:10:e5:aa:41:77:08:91:d4:14:32 was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kfww.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:34:4b:84:f5:1a:c8:48:10:e5:aa:41:77:08:91:d4:14:32Serial Number (int): 279131923329351004572129773897173093848114
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b4:24:4f:eb:a1:e7:b5:ef:7a:08:c8:91:69:0b:af:00:93:7a:cc:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b5:b6:5b:20:c8:4a:03:06:f9:c3:3f:5f:e9:14:a6:7a:d6:77:da:b6
Fingerprint (sha256): e3:92:50:da:ba:29:18:df:3b:c7:4e:84:5e:e2:f4:17:8a:9d:f8:cf:ef:6e:ac:03:7d:d1:1e:95:bd:dd:84:79
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kfww.de
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kfww.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.4seasonsconservatoryroofs.co.uk
*.8455.icu
*.abbadabba.com.au
*.apache-friends.org
*.aviation-ia.net
*.baysitter.de
*.birdofparadise.com.au
*.briefs.net
*.bucm.pub
*.businesscentres.com.au
*.cosplay-anime.net
*.deltech.us
*.eggdonor.com.au
*.factories.com.au
*.fc.ca
*.forklifttruck.com.au
*.forosdeelectronica.es
*.handschoner.de
*.hotelbristol.com.br
*.hsl.navy
*.jobstasmania.com.au
*.kfww.de
*.kgx.de
*.kgz.de
*.khp.de
*.kicjer.de
*.kicke3r.de
*.kickedr.de
*.kickitpp.de
*.kickjer.de
*.kicktippp.de
*.kickwe.de
*.kieferorthopaedie-wissen.de
*.kih.de
*.moogle.ca
*.mumbleschickens.co.uk
*.scram.us
*.sliver.nl
*.smug.com.au
*.spppedtest.net
*.stacy.com.au
*.sungwing.ca
*.thepiratebayse.org
*.trueformclinicalpilates.co.uk
*.visio.es
*.warenwirtschaftsprogramme.de
*.watchtv.is
*.xn--krperschaftsteuererklrung-5ec97b.de
*.youmult.net
*.zazhi.net
4seasonsconservatoryroofs.co.uk
8455.icu
abbadabba.com.au
apache-friends.org
aviation-ia.net
baysitter.de
birdofparadise.com.au
briefs.net
bucm.pub
businesscentres.com.au
cosplay-anime.net
deltech.us
eggdonor.com.au
factories.com.au
fc.ca
forklifttruck.com.au
forosdeelectronica.es
handschoner.de
hotelbristol.com.br
hsl.navy
jobstasmania.com.au
kfww.de
kgx.de
kgz.de
khp.de
kicjer.de
kicke3r.de
kickedr.de
kickitpp.de
kickjer.de
kicktippp.de
kickwe.de
kieferorthopaedie-wissen.de
kih.de
moogle.ca
mumbleschickens.co.uk
scram.us
sliver.nl
smug.com.au
spppedtest.net
stacy.com.au
sungwing.ca
thepiratebayse.org
trueformclinicalpilates.co.uk
visio.es
warenwirtschaftsprogramme.de
watchtv.is
xn--krperschaftsteuererklrung-5ec97b.de
youmult.net
zazhi.net
*.8455.icu
*.abbadabba.com.au
*.apache-friends.org
*.aviation-ia.net
*.baysitter.de
*.birdofparadise.com.au
*.briefs.net
*.bucm.pub
*.businesscentres.com.au
*.cosplay-anime.net
*.deltech.us
*.eggdonor.com.au
*.factories.com.au
*.fc.ca
*.forklifttruck.com.au
*.forosdeelectronica.es
*.handschoner.de
*.hotelbristol.com.br
*.hsl.navy
*.jobstasmania.com.au
*.kfww.de
*.kgx.de
*.kgz.de
*.khp.de
*.kicjer.de
*.kicke3r.de
*.kickedr.de
*.kickitpp.de
*.kickjer.de
*.kicktippp.de
*.kickwe.de
*.kieferorthopaedie-wissen.de
*.kih.de
*.moogle.ca
*.mumbleschickens.co.uk
*.scram.us
*.sliver.nl
*.smug.com.au
*.spppedtest.net
*.stacy.com.au
*.sungwing.ca
*.thepiratebayse.org
*.trueformclinicalpilates.co.uk
*.visio.es
*.warenwirtschaftsprogramme.de
*.watchtv.is
*.xn--krperschaftsteuererklrung-5ec97b.de
*.youmult.net
*.zazhi.net
4seasonsconservatoryroofs.co.uk
8455.icu
abbadabba.com.au
apache-friends.org
aviation-ia.net
baysitter.de
birdofparadise.com.au
briefs.net
bucm.pub
businesscentres.com.au
cosplay-anime.net
deltech.us
eggdonor.com.au
factories.com.au
fc.ca
forklifttruck.com.au
forosdeelectronica.es
handschoner.de
hotelbristol.com.br
hsl.navy
jobstasmania.com.au
kfww.de
kgx.de
kgz.de
khp.de
kicjer.de
kicke3r.de
kickedr.de
kickitpp.de
kickjer.de
kicktippp.de
kickwe.de
kieferorthopaedie-wissen.de
kih.de
moogle.ca
mumbleschickens.co.uk
scram.us
sliver.nl
smug.com.au
spppedtest.net
stacy.com.au
sungwing.ca
thepiratebayse.org
trueformclinicalpilates.co.uk
visio.es
warenwirtschaftsprogramme.de
watchtv.is
xn--krperschaftsteuererklrung-5ec97b.de
youmult.net
zazhi.net
Other certificates including the domain name kfww.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for kfww.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIM6TCCC9GgAwIBAgISAzRLhPUayEgQ5apBdwiR1BQyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDExMDE0MjVaFw0x OTA1MzAxMDE0MjVaMBIxEDAOBgNVBAMTB2tmd3cuZGUwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCmdZ/EsYmzJ3l2v2HeKU/51C0GmjN62L/RWg254ZYJ Gp8dVZXV6OqL21g5hgWcF21bQ5BmK3BFDR0QvQNVUaH/czmTkIzFOMu1KoVpq6tS QI5dVAAHczPor48w7dcwEgVGScV63NXf3b6X5HQga9iiz5te0twsQsaQlvI1LKdO PJIdk/TBtup+oaCR3wd4zRJxncvYAU5RdZMJQls/iwFJdg82hG0ST23xDgheoib8 BQLHUTbBV/G4J8DpqjkM6jTB4LcnZVpI7jmLc89MYGrZHQkFHgMa+YxE6c1zkjgQ uPla4DK1xTYnruA1MJS8Mo1AzaBwVw3N1+LWvfB0dmFP1N93l6i+yFmbWhmE/9wM Lp2E97BJ6aCBPXv2Vu70k4h8+ML8jVsp1IwuQ1KgCsUrcuO7KVC//+WIOwMFySEW 7ptNCng4WXWACok+tMnf9UBT9M+U+veHpN57iIZK6eEF+OLp8hXKyEMcd+hUNeeU wYswr7Ug4ERF/xjbNv5PTvmuGsByOeJQcMMEGwOa1v2od4IS2l0t7BCD5i/KDkWW t6IWnHAjPZ8LpCteAYPT7RVjZ5YG/ybu6KUlrZCqlhRblJ3s6oxOyxHUgW2kNE5e nkgmocjkIP5l5Q4LSFkoNmExNgBaonkBgzK4XJd8M2tCYnxCOeoWeLL5qoNWkgj5 DwIDAQABo4II/zCCCPswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS0JE/roee173oI yJFpC68Ak3rMuDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMIIGswYDVR0RBIIGqjCCBqaCISouNHNlYXNvbnNjb25zZXJ2 YXRvcnlyb29mcy5jby51a4IKKi44NDU1LmljdYISKi5hYmJhZGFiYmEuY29tLmF1 ghQqLmFwYWNoZS1mcmllbmRzLm9yZ4IRKi5hdmlhdGlvbi1pYS5uZXSCDiouYmF5 c2l0dGVyLmRlghcqLmJpcmRvZnBhcmFkaXNlLmNvbS5hdYIMKi5icmllZnMubmV0 ggoqLmJ1Y20ucHVighgqLmJ1c2luZXNzY2VudHJlcy5jb20uYXWCEyouY29zcGxh eS1hbmltZS5uZXSCDCouZGVsdGVjaC51c4IRKi5lZ2dkb25vci5jb20uYXWCEiou ZmFjdG9yaWVzLmNvbS5hdYIHKi5mYy5jYYIWKi5mb3JrbGlmdHRydWNrLmNvbS5h dYIXKi5mb3Jvc2RlZWxlY3Ryb25pY2EuZXOCECouaGFuZHNjaG9uZXIuZGWCFSou aG90ZWxicmlzdG9sLmNvbS5icoIKKi5oc2wubmF2eYIVKi5qb2JzdGFzbWFuaWEu Y29tLmF1ggkqLmtmd3cuZGWCCCoua2d4LmRlgggqLmtnei5kZYIIKi5raHAuZGWC Cyoua2ljamVyLmRlggwqLmtpY2tlM3IuZGWCDCoua2lja2Vkci5kZYINKi5raWNr aXRwcC5kZYIMKi5raWNramVyLmRlgg4qLmtpY2t0aXBwcC5kZYILKi5raWNrd2Uu ZGWCHSoua2llZmVyb3J0aG9wYWVkaWUtd2lzc2VuLmRlgggqLmtpaC5kZYILKi5t b29nbGUuY2GCFyoubXVtYmxlc2NoaWNrZW5zLmNvLnVrggoqLnNjcmFtLnVzggsq LnNsaXZlci5ubIINKi5zbXVnLmNvbS5hdYIQKi5zcHBwZWR0ZXN0Lm5ldIIOKi5z dGFjeS5jb20uYXWCDSouc3VuZ3dpbmcuY2GCFCoudGhlcGlyYXRlYmF5c2Uub3Jn gh8qLnRydWVmb3JtY2xpbmljYWxwaWxhdGVzLmNvLnVrggoqLnZpc2lvLmVzgh4q LndhcmVud2lydHNjaGFmdHNwcm9ncmFtbWUuZGWCDCoud2F0Y2h0di5pc4IpKi54 bi0ta3JwZXJzY2hhZnRzdGV1ZXJlcmtscnVuZy01ZWM5N2IuZGWCDSoueW91bXVs dC5uZXSCCyouemF6aGkubmV0gh80c2Vhc29uc2NvbnNlcnZhdG9yeXJvb2ZzLmNv LnVrggg4NDU1LmljdYIQYWJiYWRhYmJhLmNvbS5hdYISYXBhY2hlLWZyaWVuZHMu b3Jngg9hdmlhdGlvbi1pYS5uZXSCDGJheXNpdHRlci5kZYIVYmlyZG9mcGFyYWRp c2UuY29tLmF1ggpicmllZnMubmV0gghidWNtLnB1YoIWYnVzaW5lc3NjZW50cmVz LmNvbS5hdYIRY29zcGxheS1hbmltZS5uZXSCCmRlbHRlY2gudXOCD2VnZ2Rvbm9y LmNvbS5hdYIQZmFjdG9yaWVzLmNvbS5hdYIFZmMuY2GCFGZvcmtsaWZ0dHJ1Y2su Y29tLmF1ghVmb3Jvc2RlZWxlY3Ryb25pY2EuZXOCDmhhbmRzY2hvbmVyLmRlghNo b3RlbGJyaXN0b2wuY29tLmJygghoc2wubmF2eYITam9ic3Rhc21hbmlhLmNvbS5h dYIHa2Z3dy5kZYIGa2d4LmRlggZrZ3ouZGWCBmtocC5kZYIJa2ljamVyLmRlggpr aWNrZTNyLmRlggpraWNrZWRyLmRlggtraWNraXRwcC5kZYIKa2lja2plci5kZYIM a2lja3RpcHBwLmRlgglraWNrd2UuZGWCG2tpZWZlcm9ydGhvcGFlZGllLXdpc3Nl bi5kZYIGa2loLmRlggltb29nbGUuY2GCFW11bWJsZXNjaGlja2Vucy5jby51a4II c2NyYW0udXOCCXNsaXZlci5ubIILc211Zy5jb20uYXWCDnNwcHBlZHRlc3QubmV0 ggxzdGFjeS5jb20uYXWCC3N1bmd3aW5nLmNhghJ0aGVwaXJhdGViYXlzZS5vcmeC HXRydWVmb3JtY2xpbmljYWxwaWxhdGVzLmNvLnVrggh2aXNpby5lc4Icd2FyZW53 aXJ0c2NoYWZ0c3Byb2dyYW1tZS5kZYIKd2F0Y2h0di5pc4IneG4tLWtycGVyc2No YWZ0c3RldWVyZXJrbHJ1bmctNWVjOTdiLmRlggt5b3VtdWx0Lm5ldIIJemF6aGku bmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFp OPZmUgAABAMASDBGAiEA0ZXEt6y52QoE78htAbDzihimC277FENUMRN+WaESELwC IQCy3w7lcnHSGV5ZJ/yIaYHSq70NUDbT6kaV5jRcn5P+3wB1AHR+2oMxrTMQkSGc ziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABaTj2Z+YAAAQDAEYwRAIgPEiojv2F3VVe wF2okeXHfWRMdS7cKXuKHoeDr7ABXRUCIEshH6q7VZF0/n486psalyqcEr3rNAR/ RmNwMRvjE3r8MA0GCSqGSIb3DQEBCwUAA4IBAQBdo2mS8tYtpUjHFUIIx3QjF1/n mDKwk2bDm7LcVFWw9Qtaj06rht68VXuAhcl2q5nFohCVQIfRvg3EpB17chriA6wB Q4C5pVqAkMEUSwVVI7rhjSan5swf+XJ/30YnU5C6D1UIKcKvjAnkoOl+YVIXnEY1 ZdPGks9MPZRvD76ISDRJ6OhQt8EplRr6i451/6R1ICSbm63or3n82uucllf0lEkV ztJKRz2n69c4lBzmt0lSrST3jxlbMgDWSyfklxs34um9HOoPQ8m8BSBOweZ1rm23 mGAv4yVLTo3XeKDxLCraZuC+i/QpZwa9H39kYbitILyAFKRhDT2OgfS92847 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApnWfxLGJsyd5dr9h3ilP +dQtBpozeti/0VoNueGWCRqfHVWV1ejqi9tYOYYFnBdtW0OQZitwRQ0dEL0DVVGh /3M5k5CMxTjLtSqFaaurUkCOXVQAB3Mz6K+PMO3XMBIFRknFetzV392+l+R0IGvY os+bXtLcLELGkJbyNSynTjySHZP0wbbqfqGgkd8HeM0ScZ3L2AFOUXWTCUJbP4sB SXYPNoRtEk9t8Q4IXqIm/AUCx1E2wVfxuCfA6ao5DOo0weC3J2VaSO45i3PPTGBq 2R0JBR4DGvmMROnNc5I4ELj5WuAytcU2J67gNTCUvDKNQM2gcFcNzdfi1r3wdHZh T9Tfd5eovshZm1oZhP/cDC6dhPewSemggT179lbu9JOIfPjC/I1bKdSMLkNSoArF K3LjuylQv//liDsDBckhFu6bTQp4OFl1gAqJPrTJ3/VAU/TPlPr3h6Tee4iGSunh Bfji6fIVyshDHHfoVDXnlMGLMK+1IOBERf8Y2zb+T075rhrAcjniUHDDBBsDmtb9 qHeCEtpdLewQg+Yvyg5FlreiFpxwIz2fC6QrXgGD0+0VY2eWBv8m7uilJa2QqpYU W5Sd7OqMTssR1IFtpDROXp5IJqHI5CD+ZeUOC0hZKDZhMTYAWqJ5AYMyuFyXfDNr QmJ8QjnqFniy+aqDVpII+Q8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279131923329351004572129773897173093848114 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 10:14:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 10:14:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kfww.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679095385766521945652655491375872102202342290203880939414111501786461055818771633754637652831089415110266701447763290795164868453462616922326978729110919007192973871989225691181145663291372629648388443631957501162340808480426631455967893657579842695588545056865836733370939094251510735327148003806380194919169391373744652833048065250167337641913394016876147896332126192505525030850885382489480715402823675584962067356004758222115678925106124026429820129569047349875915058976176127623414721231461536098193457609809923683183390075326422160659397261632573146428949594764305299054616748312350106326596095666700105140566833166684039299073491087468549653159015119728726547197048574070221967781281188105752003411314518274411163075916945104651864564035695089576012679513173237772730484830251598977973433044361023316917615563306246239726881066695249774191155029741245998380277162935044452357407748579946128253394469511210181578045546575417660126443639051330059855078654521803833416737397061692001634569113134473056659789735361644832921774518105124351023531057999440807015053880700761647965260117495989427213972824977406739661255737240700007192829476026777697878975697401591334110691172527119432928250291495687039412019199156025727946899126543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b4244feba1e7b5ef7a08c891690baf00937accb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1706 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4seasonsconservatoryroofs.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8455.icu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abbadabba.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apache-friends.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviation-ia.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baysitter.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birdofparadise.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briefs.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucm.pub' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesscentres.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosplay-anime.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deltech.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eggdonor.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factories.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forklifttruck.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forosdeelectronica.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handschoner.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelbristol.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsl.navy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobstasmania.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kfww.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgx.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khp.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kicjer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kicke3r.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kickedr.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kickitpp.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kickjer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kicktippp.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kickwe.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kieferorthopaedie-wissen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kih.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moogle.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mumbleschickens.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sliver.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smug.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spppedtest.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stacy.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sungwing.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepiratebayse.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trueformclinicalpilates.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visio.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warenwirtschaftsprogramme.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchtv.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--krperschaftsteuererklrung-5ec97b.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youmult.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zazhi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4seasonsconservatoryroofs.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8455.icu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbadabba.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apache-friends.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviation-ia.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baysitter.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdofparadise.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefs.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucm.pub' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesscentres.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosplay-anime.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltech.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eggdonor.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factories.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forklifttruck.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forosdeelectronica.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handschoner.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelbristol.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsl.navy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobstasmania.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfww.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgx.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khp.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kicjer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kicke3r.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickedr.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickitpp.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickjer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kicktippp.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickwe.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kieferorthopaedie-wissen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kih.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moogle.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mumbleschickens.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scram.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sliver.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smug.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spppedtest.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacy.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sungwing.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepiratebayse.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trueformclinicalpilates.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visio.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warenwirtschaftsprogramme.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchtv.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--krperschaftsteuererklrung-5ec97b.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmult.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zazhi.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016938f666520000040300483046022100d195c4b7acb9d90a04efc86d01b0f38a18a60b6efb14435431137e59a11210bc022100b2df0ee57271d2195e5927fc886981d2abbd0d5036d3ea4695e6345c9f93fedf007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016938f667e6000004030046304402203c48a88efd85dd555ec05da891e5c77d644c752edc297b8a1e8783afb0015d1502204b211faabb559174fe7e3cea9b1a972a9c12bdeb34047f466370311be3137afc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005da36992f2d62da548c7154208c77423175fe79832b09366c39bb2dc5455b0f50b5a8f4eab86debc557b8085c976ab99c5a210954087d1be0dc4a41d7b721ae203ac014380b9a55a8090c1144b055523bae18d26a7e6cc1ff9727fdf46275390ba0f550829c2af8c09e4a0e97e6152179c463565d3c692cf4c3d946f0fbe88483449e8e850b7c129951afa8b8e75ffa47520249b9bade8af79fcdaeb9c9657f4944915ced24a473da7ebd738941ce6b74952ad24f78f195b3200d64b27e4971b37e2e9bd1cea0f43c9bc05204ec1e675ae6db798602fe3254b4e8dd778a0f12c2ada66e0be8bf4296706bd1f7f6461b8ad20bc8014a4610d3d8e81f4bddbce3b