broaward.org

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:e0:05:a4:2f:5f:5c:37:18:34:36:91:4b:b8:25:43:eb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=broaward.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:e0:05:a4:2f:5f:5c:37:18:34:36:91:4b:b8:25:43:eb
Serial Number (int): 433817511819884127476337291793608477066219
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8c:dc:5f:5c:e8:54:5d:94:45:ea:87:50:d3:cd:59:a3:aa:88:07:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:23:a6:70:9e:65:0f:9b:c3:a8:6d:f8:e9:2b:35:75:e7:d8:80:52
Fingerprint (sha256): f2:29:3f:fd:1d:52:fd:41:c4:82:a7:c7:c5:a1:d9:32:b8:6c:8a:36:56:07:c1:62:f1:cc:3e:8f:a6:12:27:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate broaward.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for broaward.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.allgemeines-krankheitsgefuehl.de
*.allthatjazz-cheshire.co.uk
*.atassian.net
*.blocklabs.xyz
*.bookee.org
*.bristolsutor.co.uk
*.broaward.org
*.burnfatbelly.net
*.chgm.eu
*.day-dreamer.net
*.druginformation.com.au
*.edemokracie.eu
*.fluessigkeitsretention.de
*.freemorgen.com
*.freshhotel.org
*.gmppass.co.uk
*.goglr.de
*.hdtracker.org
*.heraldosdelapalabra.org
*.homerenos.au
*.howstrongismypassword.net
*.idothis.us
*.indianacareer.net
*.jav356.com
*.juniortvshop.com
*.klens-haiger.de
*.kraw.me
*.localize.cc
*.mercedes-bemz.de
*.nakedwines.co
*.niagarafalls.au
*.oaktreemobilty.co.uk
*.pau.com.au
*.penparcpetcentres.co.uk
*.proofing.au
*.qfind.net
*.raphael.au
*.religiontolerance.org
*.samuraj.net
*.slindeshare.net
*.socialblade.de
*.sprachenstudio.net
*.swimoutlet.co.uk
*.titipp.de
*.trycare.online
*.ui.org
*.upsdm.org
*.usanerwork.com
*.virtuesonline.org
*.watchmovies.com.au
allgemeines-krankheitsgefuehl.de
allthatjazz-cheshire.co.uk
atassian.net
blocklabs.xyz
bookee.org
bristolsutor.co.uk
broaward.org
burnfatbelly.net
chgm.eu
day-dreamer.net
druginformation.com.au
edemokracie.eu
fluessigkeitsretention.de
freemorgen.com
freshhotel.org
gmppass.co.uk
goglr.de
hdtracker.org
heraldosdelapalabra.org
homerenos.au
howstrongismypassword.net
idothis.us
indianacareer.net
jav356.com
juniortvshop.com
klens-haiger.de
kraw.me
localize.cc
mercedes-bemz.de
nakedwines.co
niagarafalls.au
oaktreemobilty.co.uk
pau.com.au
penparcpetcentres.co.uk
proofing.au
qfind.net
raphael.au
religiontolerance.org
samuraj.net
slindeshare.net
socialblade.de
sprachenstudio.net
swimoutlet.co.uk
titipp.de
trycare.online
ui.org
upsdm.org
usanerwork.com
virtuesonline.org
watchmovies.com.au

Other certificates including the domain name broaward.org

(limited to 100 certificates)
broaward.org
24studio.online
descendants.com.au
coatchoutlet.com
broaward.org
broaward.org
shorthaircutsx.org
mange.com.au
lifechangingchurch.org
broaward.org
broaward.org
broaward.org
broaward.org

Certificate

The complete raw certificate details for broaward.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433817511819884127476337291793608477066219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 03:56:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 03:56:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'broaward.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805609568027120482539562019160437870143449661786494997795646117659702887218855207639023024778420802923467457936879767041453703114893778315487456132382459828299356414307263700096957680691711320578479276829219804877321922284806063302401381239970828668483181031394738683634027699894119974054476083720409411706905394357700063066643137879384683910647025432111678586130336074456378431133695191370235472187599851268589118611127284639401693756281075654850041393240179514510809798705022378665635020696070573629052559418314516438501533996962811493893853105419786171529280461055434266097998314178227333163044577632942007121931507429493296492547666556774819723196441858751730774791290709513733831741898842399452715075075026353667931069798079674237550351455742068948224975508120999708598526855106219784968165901178734496557266420217043430424105095317017752796415116293275708134549637432536375855927174275022577618245089794283145085979671644012270727913282647823824517012243793889488107827029359459677847667949374747047851441745677108610091304923180278302683744250106907927241080889966428014263575491572011070252615800809181664417501777088756044085088745442593752156288548375784169098558320308442906474039190219722680181535938985397348343910824419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cdc5f5ce8545d9445ea8750d3cd59a3aa880726
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allgemeines-krankheitsgefuehl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allthatjazz-cheshire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atassian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blocklabs.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bristolsutor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broaward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burnfatbelly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chgm.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.day-dreamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.druginformation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edemokracie.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fluessigkeitsretention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemorgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshhotel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmppass.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goglr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdtracker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heraldosdelapalabra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homerenos.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howstrongismypassword.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idothis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianacareer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jav356.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juniortvshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klens-haiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraw.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.localize.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercedes-bemz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakedwines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niagarafalls.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oaktreemobilty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pau.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penparcpetcentres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proofing.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qfind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raphael.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.religiontolerance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samuraj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slindeshare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialblade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprachenstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swimoutlet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titipp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trycare.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upsdm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usanerwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtuesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchmovies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allgemeines-krankheitsgefuehl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allthatjazz-cheshire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atassian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blocklabs.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristolsutor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broaward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnfatbelly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chgm.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'day-dreamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druginformation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edemokracie.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluessigkeitsretention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemorgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshhotel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmppass.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goglr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdtracker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heraldosdelapalabra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homerenos.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howstrongismypassword.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idothis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianacareer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jav356.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniortvshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klens-haiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraw.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localize.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercedes-bemz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakedwines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarafalls.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaktreemobilty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pau.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penparcpetcentres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofing.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qfind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raphael.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religiontolerance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuraj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slindeshare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialblade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprachenstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swimoutlet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titipp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trycare.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upsdm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usanerwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtuesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchmovies.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e362b717f000004030048304602210084518de68a32467648dc4364abbd3dde11d08a1886a66c233bb276cfba692e7d022100c71cf76d6ffce27e30cab9ea24b6704539245643db93225cdbecb792c092cda700750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e362b71e3000004030046304402201e93d79920ba539c703c116358cff7e6a7d0e23bd3c24dbc124b457e5578cbe202203cfa95196c0f3b8c5b872088d3bad451f9df09174dd9c0d3274d79d9a0ffc31c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0081aa65d62109540b62bce169e0319b0368cf06f20d14baaeeb4928e17a72ae8b9537da1ef09078c013f2880d2e1c9f0fcb092db46097bcab495f9ceb03f54c91ca6ccc8160d0a8384b066f5a7e51cd55ca083146592d3bdbe3e6ffdea1ce50233c5d5bcb5174ddb1987285dac218006d19228d71637a376ea6dbb8ebe1e962bdd07f565a754046ca775c0ef9f6950b03bfca09c199e768a22bd074532e066e4f6c1015f788603e6de0cc797f9c1242804392f8b58910a76e863d3c7667f517940275adf15cbb42aa1bb99899ecab93fd221f94abdf25cce4738d640fe2a898df2b1ac6293969302878e0aa384d9fa10872db946f7e30b973305c021cd5cb7bbd