chikutetu.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2e:cf:5b:68:7a:1e:42:d9:77:ee:eb:a3:ad:67:33:4a:5e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chikutetu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:cf:5b:68:7a:1e:42:d9:77:ee:eb:a3:ad:67:33:4a:5e
Serial Number (int): 277265471486831313487070828342067242158686
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:82:29:d7:9e:1b:0d:b9:93:72:1b:f5:ad:87:ad:93:07:46:29:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:dd:1f:9f:eb:c8:a6:e0:dd:15:c0:35:c3:f6:67:dd:c7:1e:4a:e6
Fingerprint (sha256): e8:ba:90:ee:a2:32:a7:c8:89:f9:21:ee:85:da:32:9f:24:43:74:92:4b:5d:05:56:73:25:ef:ab:2a:47:41:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chikutetu.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chikutetu.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.222ing.tw
*.2cat.tw
*.adhsde.de
*.allergist.ca
*.auctionners.co.uk
*.aving.tw
*.bathingsuits.com.au
*.bettyslabo.com
*.bodypaint.be
*.bogspot.co
*.brasilbandalarg.com.br
*.bronchitisf.de
*.busfurniture.co.uk
*.butyrophenon.de
*.caffmoscommunity.co
*.ce2hosting.net
*.chikutetu.com
*.chinesicheshoroskop.de
*.coktailkleid.de
*.deautismus.de
*.extensiong.de
*.featherbedhorsesandponies.co.uk
*.felty-syndrom.de
*.gekkonokamen.com
*.getbetter.us
*.ikip.co.uk
*.indusmail.in
*.jodi.tv
*.kawasaki-town.com
*.kazkabu.com
*.knuepfteppiche.de
*.kodisoultions.tv
*.mcdwrapz.co.uk
*.mon-deri.com
*.nbasteam.tv
*.nevyte.cz
*.ogataken.net
*.outilook.com
*.paid-start.de
*.philippines-japan.com
*.pirateurlaub.de
*.pornd.co
*.powownow.co.uk
*.questsocial.co
*.redeemernetwork.tv
*.southamerica.ca
*.tgotv.co
*.w-time.com
*.xn--knchelschutz-5ib.de
*.xn--konzertkartenbrse-d0b.de
222ing.tw
2cat.tw
adhsde.de
allergist.ca
auctionners.co.uk
aving.tw
bathingsuits.com.au
bettyslabo.com
bodypaint.be
bogspot.co
brasilbandalarg.com.br
bronchitisf.de
busfurniture.co.uk
butyrophenon.de
caffmoscommunity.co
ce2hosting.net
chikutetu.com
chinesicheshoroskop.de
coktailkleid.de
deautismus.de
extensiong.de
featherbedhorsesandponies.co.uk
felty-syndrom.de
gekkonokamen.com
getbetter.us
ikip.co.uk
indusmail.in
jodi.tv
kawasaki-town.com
kazkabu.com
knuepfteppiche.de
kodisoultions.tv
mcdwrapz.co.uk
mon-deri.com
nbasteam.tv
nevyte.cz
ogataken.net
outilook.com
paid-start.de
philippines-japan.com
pirateurlaub.de
pornd.co
powownow.co.uk
questsocial.co
redeemernetwork.tv
southamerica.ca
tgotv.co
w-time.com
xn--knchelschutz-5ib.de
xn--konzertkartenbrse-d0b.de

Other certificates including the domain name chikutetu.com

(limited to 100 certificates)
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
chikutetu.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
xn--kampfanzge-heb.de
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
whichwilkls.co.uk
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
chikutetu.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
youstolefrom.me
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
chikutetu.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
sni134641.cloudflaressl.com
chikutetu.com
sni134641.cloudflaressl.com

Certificate

The complete raw certificate details for chikutetu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2CNy3ZPu5Xr6RM0RdaWY
V1wYcqt3dJQIwgmPOd4urOIaUjEsZI4HXkQS8WYpFUb507Uc+cBogGxeLmGj9o6+
8dxyVjzgKRsXpIciEXb/J0baTqrNIPl+rtCeEtNcYQiL1u/5rOdtH8MP28Zhcpbj
fBO6R+agTsubUn2v7sEcSwyLSjIfyA9tWkeMSposc8SkO9fT3qPrDMMv3x0IFUrT
7mRZfaV/BU0kfuTohuujV/YP5/8ubVlneA9sRFdmJDt6jhcd09MWYOVRA1ETF+p4
+1nZ88wQe5+FZ1y49GIdDr76V+Bsee/RHQ4iDqp3X2w8m/NJZZpM3+l5Lkh1FnO3
lVEQdxF75dcUSvt0Hy9OJf2hagAdIWTKRCmiKYi6OxVEuBQAEO0gJAyuD7ynjWL4
Elthlz2NdYeIyQo2NSkq7EpNGCA0RkEFwVM1SeQYBim6KBOS+faDDeGEDN6x8Fsx
rXzcr9NU0UG3rMMBuFL5WXLVoBzjFtECNspxhnqX/nDwXVWvyp8t8LIdp3hS8KV9
Wn4o0DVESShbKNds7/gC4N61Wd8kwygk3xb+g4AvhEsCS2lKkW/xYluRssJUk3WN
Yrw3PxuHzhueFYhVxj1WIoBdIhvS/6pmi9Lm79Wu3OoOfkN1iW5DNmUiBrcCOYOg
zB8xkgYwHWCiD4i1wKuaXRUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277265471486831313487070828342067242158686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 16:03:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 16:03:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chikutetu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881768032958740701540795405573314676538711627759318323542334240802282125929368998181730783474047139653108100560168333893320129168253298373383949675963043685436298455569467550288411657801365671886546216585036254233506472862719358301946285030507481276748922342435958495915789123708427373362132439092558395166290885586325378223852826784168465267978950785996627516513166559922618570715318911438910555650487414604534339505679289050372101635544625019457728832166161793901717074489230588868948524023387132683683229892944014352193577658359564608163568797699964296564410261206694396152482173337319433950996937201926033322388092821660035171903924735550591563692181744289032345291423263092413109120706313374390665607849918040988873301993118406585366327073797411481156572744219676549181707246914919277175686404592764751424423561499250245524563785589037851764855738276052122511371423991137929628525334158905349014754408377778537728301718811946496606859675020409553493922893200276820926004374257116826983892590035855945264416234169086640262714731184830474762002176209221183476049356266527796856549159290871118770138319815561461738740499271550557727596475320636996083853844261328778372254693677514979236173480912324405218112884176769594254327176469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d8229d79e1b0db993721bf5ad87ad9307462995
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1738 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.222ing.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2cat.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adhsde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allergist.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctionners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aving.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bathingsuits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettyslabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodypaint.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bogspot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasilbandalarg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bronchitisf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.busfurniture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butyrophenon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caffmoscommunity.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ce2hosting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chikutetu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinesicheshoroskop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coktailkleid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deautismus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extensiong.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.featherbedhorsesandponies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.felty-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gekkonokamen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getbetter.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indusmail.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jodi.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kawasaki-town.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kazkabu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knuepfteppiche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kodisoultions.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdwrapz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mon-deri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbasteam.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevyte.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogataken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outilook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paid-start.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philippines-japan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pirateurlaub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powownow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.questsocial.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redeemernetwork.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southamerica.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tgotv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w-time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--knchelschutz-5ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--konzertkartenbrse-d0b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '222ing.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2cat.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adhsde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allergist.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctionners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aving.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathingsuits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettyslabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodypaint.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogspot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasilbandalarg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronchitisf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busfurniture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butyrophenon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caffmoscommunity.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ce2hosting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chikutetu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinesicheshoroskop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coktailkleid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deautismus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extensiong.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featherbedhorsesandponies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felty-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gekkonokamen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getbetter.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indusmail.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodi.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawasaki-town.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazkabu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knuepfteppiche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodisoultions.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdwrapz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-deri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbasteam.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevyte.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogataken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outilook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paid-start.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippines-japan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pirateurlaub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powownow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questsocial.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeemernetwork.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southamerica.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgotv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--knchelschutz-5ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--konzertkartenbrse-d0b.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b048bec9c0000040300473045022060ad95c09b6258f5300924dbdf35eaff0cf8936d3ee195e2b9e9123a6b8ed999022100e4592299e1b256a1b01d26acbb94fb6096dabce0ee307e08c3e89a5a2a2ae1d4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b048beacd000004030047304502202426720eec1189387829ea6292d41b1e6295be8dc8b1d784f3d242aad12527b6022100f8cb75f71aa2fdaef01de4fd34273a45ad89a17e5f0a005726eb81480af170cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0060ac8d558a838a1bbc8159f649711f96f0a0521b1f1a5b68654b03ec22ce2b1b90d1af584dc5a91c20be8f6a5d2ec04cc21c8c393453ed723640cc2c1a2731e3b7ebd34f2750cc17f45b45f4c42370be8e98874742b78a33e621cbb4932ffa7c1f477c92b81346db40400ba9cce585bddfcf78991c48942fa67122da424aa0a87ded82d0fdef1fc2f95387a4076a3ccbb668f58833ab8acb43a58eb336af1ca0a1b54241b3ad830254d9943011bc3e785e7e1350eafcc0d6bf5bfd16150ba084c05d2347289d74be72a266012ff66bd6cb56295780aa2fef53ef43ec344abcfe5e7774e031afe493502eb3d6a980c0bf6d64c04bc806a604213583d123b0f861