datashine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:64:a5:a4:6c:55:da:4e:8d:60:0b:4f:bb:d9:60:7a:f9:ac was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=datashine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:a5:a4:6c:55:da:4e:8d:60:0b:4f:bb:d9:60:7a:f9:ac
Serial Number (int): 295585270840666090821042600657227030919596
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:97:3a:1c:54:30:07:cd:4b:29:49:4f:73:eb:33:8d:00:be:1f:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:7f:7d:7a:7a:6c:f4:b4:7e:c6:07:38:46:dd:dc:6f:d7:ad:ca:38
Fingerprint (sha256): ef:52:71:ad:7a:6a:ec:ff:24:08:cb:53:5b:7a:b8:e4:0e:91:7d:c7:35:37:7f:cb:8a:c5:8d:27:7c:90:7a:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate datashine.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datashine.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.baustofhandel.de
*.bestcare.pt
*.bodologie.de
*.bookstand.com.au
*.datashine.org
*.dc2dailyconservative.com
*.divinedesserts.org
*.ehevotzen.de
*.fif19pro.com
*.geburtstagsvorlage.de
*.golfinstruction.com.au
*.gsp-games.co.uk
*.hallo-kleinanzeigen.de
*.healthquestionaire.co.uk
*.industriehydraulik.de
*.jn10.co.uk
*.kranknkassen.de
*.lrzs.info
*.maternitybras.com.au
*.miotz.fr
*.mortgagecalc.com.au
*.nestmattress.com.au
*.passthebadge.com
*.poolsolar.com.au
*.procure.nl
*.rainman.com.au
*.readcdaloudrevival.com
*.redimps-clubshop.co.uk
*.samtheman.com.au
*.socialtree.ca
*.steuer5erklaerung.de
*.sypilis.de
*.thesuninnnewbottle.co.uk
*.walnussschnaps.de
*.wheelersclocks.co.uk
*.woodingtontroutfishery.co.uk
*.wristgames.us
*.xn--annanasdit-y5a.de
*.xn--annuittenberechnung-lwb.de
*.xn--birnenbrste-0hb.de
*.xn--flgew-lva.de
*.xn--herbsthuser-r8a.de
*.xn--lufthrner-47a.de
*.xn--lwenzahnhonig-imb.de
*.xn--rentabilittsvorschau-kzb.de
*.xn--schlfenbein-o8a.de
*.xn--unisex-frisre-smb.de
*.yorkshireequineproducts.co.uk
*.yqhoo.co.uk
*.zit.com.au
baustofhandel.de
bestcare.pt
bodologie.de
bookstand.com.au
datashine.org
dc2dailyconservative.com
divinedesserts.org
ehevotzen.de
fif19pro.com
geburtstagsvorlage.de
golfinstruction.com.au
gsp-games.co.uk
hallo-kleinanzeigen.de
healthquestionaire.co.uk
industriehydraulik.de
jn10.co.uk
kranknkassen.de
lrzs.info
maternitybras.com.au
miotz.fr
mortgagecalc.com.au
nestmattress.com.au
passthebadge.com
poolsolar.com.au
procure.nl
rainman.com.au
readcdaloudrevival.com
redimps-clubshop.co.uk
samtheman.com.au
socialtree.ca
steuer5erklaerung.de
sypilis.de
thesuninnnewbottle.co.uk
walnussschnaps.de
wheelersclocks.co.uk
woodingtontroutfishery.co.uk
wristgames.us
xn--annanasdit-y5a.de
xn--annuittenberechnung-lwb.de
xn--birnenbrste-0hb.de
xn--flgew-lva.de
xn--herbsthuser-r8a.de
xn--lufthrner-47a.de
xn--lwenzahnhonig-imb.de
xn--rentabilittsvorschau-kzb.de
xn--schlfenbein-o8a.de
xn--unisex-frisre-smb.de
yorkshireequineproducts.co.uk
yqhoo.co.uk
zit.com.au

Other certificates including the domain name datashine.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for datashine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295585270840666090821042600657227030919596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 18:07:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 18:07:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datashine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818945922713275095833135342029358923231336751979113193631959634726833326018022421731337802183746488293699660196247571902906192327622998673777050203320568872893259527155074680547735939060819410787417801125766235076870333574976579956065380282423033909320730631664773287408001459428707489010538895264785367073145806363345225915217522581935788568267935679940836609327107205529390140835652071173398636527120229567337304898094991682809243755915154528490857948021915480474866902656770357412779839321128789395491305246765392574725213731591565860651265146516634607088636042508436305115755055140929470845016156330072622573838051921627631229216810662183400410573460467144161984812555811366383227471000236360755855648136886408014707336040139014042024549157186153135157581653592844881847926774476879216560283898205630965684469356165886463652583611971179320307116672278006703012947868059532279678511603368978236080471367469795710468242235065736071378959079565566111069014513505788385090387691350962417967397916686199363353779363337595495009612907783456072761001189443074466541239916454554645638547027072809926795777850827049417670123531531003345990078511519997011163460883019820882434186004522875181537948746341795647302542842654755646771931743831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33973a1c543007cd4b29494f73eb338d00be1f5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baustofhandel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestcare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookstand.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datashine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc2dailyconservative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divinedesserts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehevotzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fif19pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geburtstagsvorlage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfinstruction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsp-games.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hallo-kleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthquestionaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.industriehydraulik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jn10.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kranknkassen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrzs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maternitybras.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miotz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagecalc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestmattress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passthebadge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poolsolar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procure.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rainman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readcdaloudrevival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redimps-clubshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samtheman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialtree.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuer5erklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sypilis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesuninnnewbottle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walnussschnaps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheelersclocks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodingtontroutfishery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wristgames.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--annanasdit-y5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--annuittenberechnung-lwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--birnenbrste-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flgew-lva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--herbsthuser-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lufthrner-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lwenzahnhonig-imb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rentabilittsvorschau-kzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schlfenbein-o8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--unisex-frisre-smb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkshireequineproducts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yqhoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baustofhandel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookstand.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datashine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc2dailyconservative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinedesserts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehevotzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fif19pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geburtstagsvorlage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfinstruction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp-games.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallo-kleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthquestionaire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industriehydraulik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jn10.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kranknkassen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrzs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maternitybras.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miotz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecalc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestmattress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passthebadge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolsolar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procure.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readcdaloudrevival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redimps-clubshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtheman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialtree.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuer5erklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sypilis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesuninnnewbottle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walnussschnaps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelersclocks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodingtontroutfishery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wristgames.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--annanasdit-y5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--annuittenberechnung-lwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--birnenbrste-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flgew-lva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--herbsthuser-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lufthrner-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lwenzahnhonig-imb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rentabilittsvorschau-kzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schlfenbein-o8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--unisex-frisre-smb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshireequineproducts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqhoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zit.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f1a68846f000004030046304402206f3e27f27a5801ae78388d183b0a6d2717306ee76c2502c8115218f69b9500cc022036d782ff72d4db44eb658d246bdcfaf8ef1d21ebafc5ae95b52b966fe3b6367a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f1a68845a0000040300473045022100b0ce0f23c877c891e0c4fdbda6a3d1a94196007df0fed89a2f9fcb436f9197b8022012275463753f23cabf21fd47ee1bb958bf66076ae6b261458740873a7b1a87f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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