shoptime.au

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:dc:81:92:5c:97:25:1c:31:b2:50:b2:49:3b:9c:8c:bb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shoptime.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:dc:81:92:5c:97:25:1c:31:b2:50:b2:49:3b:9c:8c:bb
Serial Number (int): 282387185111392988880278018295511954263227
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:47:03:55:bc:f8:a0:5e:15:e3:01:f7:94:16:f6:86:33:43:37:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:73:69:f8:19:85:a7:a4:d5:0c:a6:b3:ec:fc:df:9a:cf:11:19:8e
Fingerprint (sha256): e9:a6:02:c4:13:b0:8c:a9:c7:42:8e:9e:90:11:90:ab:e6:97:e3:c1:1a:d4:57:f5:0d:5c:9d:47:2c:2e:a8:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shoptime.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shoptime.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3a4z5.us
*.amonguspet.com
*.apclt20.co
*.armmonia.com
*.bakedin.com.au
*.best-masters.com.au
*.beurrettevideos.com
*.bizz.net.au
*.blv.au
*.cij.au
*.deber.es
*.djufqqkwkixaassi.me
*.doctoralia.au
*.e-u.de
*.globalportfoliomanagement.be
*.gsn.au
*.hints.au
*.hvacelevate.net
*.jimmytatenc.com
*.jungensandalen.de
*.kommionskleider.de
*.lifeseledtor.com
*.luftkissenmaeher.de
*.mcginleys.co.uk
*.mistralsiberians.com
*.modexcomputer.com
*.nisbest.co.uk
*.o-pay.eu
*.oophoritis.de
*.photofacy.de
*.pinayfle.com
*.pokerklas415.com
*.pornhosting.org
*.private-krankenvericherung.de
*.reziprok.de
*.seelenblindheit.de
*.shoptime.au
*.strotarife.de
*.telefonauskunpft.de
*.telonauskunft.de
*.txconvergent.com
*.umv.au
*.ungod.org
*.xgx.de
*.xn--existensgrndung-8vb.de
*.xn--ftus-5qa.de
*.xn--geschftsbesorgungsvertrag-pec.de
*.xn--hundzchter-eeb.de
*.xn--mnzschtzung-q8a02a.de
*.xn--sclerjobs-r9a.de
3a4z5.us
amonguspet.com
apclt20.co
armmonia.com
bakedin.com.au
best-masters.com.au
beurrettevideos.com
bizz.net.au
blv.au
cij.au
deber.es
djufqqkwkixaassi.me
doctoralia.au
e-u.de
globalportfoliomanagement.be
gsn.au
hints.au
hvacelevate.net
jimmytatenc.com
jungensandalen.de
kommionskleider.de
lifeseledtor.com
luftkissenmaeher.de
mcginleys.co.uk
mistralsiberians.com
modexcomputer.com
nisbest.co.uk
o-pay.eu
oophoritis.de
photofacy.de
pinayfle.com
pokerklas415.com
pornhosting.org
private-krankenvericherung.de
reziprok.de
seelenblindheit.de
shoptime.au
strotarife.de
telefonauskunpft.de
telonauskunft.de
txconvergent.com
umv.au
ungod.org
xgx.de
xn--existensgrndung-8vb.de
xn--ftus-5qa.de
xn--geschftsbesorgungsvertrag-pec.de
xn--hundzchter-eeb.de
xn--mnzschtzung-q8a02a.de
xn--sclerjobs-r9a.de

Other certificates including the domain name shoptime.au

(limited to 100 certificates)
shoptime.au
shoptime.au
shoptime.au
shoptime.au
shoptime.au
shoptime.au
cij.au
shoptime.au
shoptime.au

Certificate

The complete raw certificate details for shoptime.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282387185111392988880278018295511954263227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 04:34:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 04:34:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shoptime.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780437371228720427067550695355400756365282868778031720397445449321995139117458777252027072228342717559302558704586633507634429563953319486720736968317206750298463897517400315976220436433309253626270120850286557471451233909560225845791037738823083474901303987807996815415155174747738348302063881189046431030068094741585564268313904523321854707481598247501012360055306960938105036125347507091095052811591282135531218797756372660130679457823251575227051082793691811374390136110867726516049464596686294321348953101272555279949583670459515551173004870256290212958887996544630727965195439527459001319575937495528017878064973880231275110792796125256046126762846081208993606574542210941613663727652617786005814236763408950981606685240432602665532821801724487870353612882241060707403593785522094045795655858163724870438043553483657796368695774799140475233812833206606228872103259887107719306263811815110020488208571191390808829828567137059899977171505145589137948255316743258494664250652245642601108569905231228086007902670816789874204623936536003956758485785106667881192981537065638916592070365669168400357483374266042317028731096478580710138425920335589225002515139202197174191774477555851333008597569130778436632350373965523612356248297207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8470355bcf8a05e15e301f79416f68633433748
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3a4z5.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amonguspet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apclt20.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armmonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakedin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.best-masters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beurrettevideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bizz.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cij.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deber.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djufqqkwkixaassi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctoralia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalportfoliomanagement.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hints.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacelevate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jimmytatenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jungensandalen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kommionskleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeseledtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luftkissenmaeher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcginleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mistralsiberians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modexcomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nisbest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o-pay.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oophoritis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photofacy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinayfle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokerklas415.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornhosting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.private-krankenvericherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reziprok.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seelenblindheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoptime.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strotarife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telefonauskunpft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telonauskunft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txconvergent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ungod.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xgx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--existensgrndung-8vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ftus-5qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--geschftsbesorgungsvertrag-pec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hundzchter-eeb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mnzschtzung-q8a02a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sclerjobs-r9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3a4z5.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amonguspet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apclt20.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armmonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakedin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'best-masters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beurrettevideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizz.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cij.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deber.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djufqqkwkixaassi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctoralia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalportfoliomanagement.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hints.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacelevate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimmytatenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jungensandalen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kommionskleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeseledtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luftkissenmaeher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcginleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistralsiberians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modexcomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nisbest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o-pay.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oophoritis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photofacy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinayfle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokerklas415.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornhosting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-krankenvericherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reziprok.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seelenblindheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoptime.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strotarife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefonauskunpft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telonauskunft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txconvergent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ungod.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xgx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--existensgrndung-8vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ftus-5qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--geschftsbesorgungsvertrag-pec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hundzchter-eeb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mnzschtzung-q8a02a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sclerjobs-r9a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b278755240000040300483046022100a351e918f431bb38a5cf2f5c841c4cb7b0aa694671bc132aaefa9a40a90fdf7b0221008fdf5b2f3dde09b68ba26c10a830643ea3e2582156593da2f9de34cf53dde5aa007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b278755450000040300473045022100daf86ff92053904db6d4f95b8522214105d6e04dd1182b939a95117bd7eefe8002200f5fbc774233c6d7a4ed849fd4e56ecaa0d213046c5db1e3e68be6cfda1764b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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