decisions.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:2a:66:4d:e3:42:a0:b6:b4:e3:55:ce:b8:87:56:b1:5d:c3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=decisions.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:2a:66:4d:e3:42:a0:b6:b4:e3:55:ce:b8:87:56:b1:5d:c3
Serial Number (int): 362876988809534347887881695184834610159043
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:91:69:1d:9b:8d:f4:22:5b:ba:51:a7:18:86:79:de:3f:7a:45:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:31:82:d9:e3:bc:e1:b8:ae:a8:49:06:d7:b7:49:db:12:5c:ef:7b
Fingerprint (sha256): f3:6f:1d:a2:88:1e:2e:10:e5:ee:44:17:0c:b5:ff:0c:07:19:df:03:34:1e:49:4a:0f:95:20:ed:67:36:72:29

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate decisions.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for decisions.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aberturasdg.com
*.adultdiapers.com.au
*.aemco.biz
*.ager4nc.com
*.aislingweddings.com
*.arschlochbilder.de
*.boldest.net
*.bubbleled.com
*.bukkotapes.com
*.chateaudebeauregard.net
*.clownillustraition.com
*.conservenergy.org
*.dastiplasti.com
*.decisions.co.za
*.district1forherbold.com
*.dlj.de
*.erotikfilmer.de
*.erotikshops24.de
*.erziehungsbeauftragung.de
*.florens2010.com
*.footballers.com.au
*.grant8718pharmacy.com
*.indianmuseum-calcutta.org
*.lingdianxs.cc
*.livelorecompensa.info
*.lpgvitrakchayan.in
*.lufthahnsa.de
*.lufthansad.de
*.lufthansade.de
*.made-lv.com
*.mapiexpertise.com
*.mekonsportswear.com
*.mspclamps.com
*.okumurak.net
*.qhmsgl.com
*.rains.com.au
*.rossma.de
*.rtln.de
*.sectorexport.com
*.senile-demenz.de
*.silvercreekgolfcarts.com
*.stachowskisausage.com
*.staedl.de
*.stephan.eu
*.sw40hx.com
*.tarifvergeich.de
*.testbreichte.de
*.theambassador.com.au
*.web-newtype.com
*.xn--sinnessprche-llb.de
aberturasdg.com
adultdiapers.com.au
aemco.biz
ager4nc.com
aislingweddings.com
arschlochbilder.de
boldest.net
bubbleled.com
bukkotapes.com
chateaudebeauregard.net
clownillustraition.com
conservenergy.org
dastiplasti.com
decisions.co.za
district1forherbold.com
dlj.de
erotikfilmer.de
erotikshops24.de
erziehungsbeauftragung.de
florens2010.com
footballers.com.au
grant8718pharmacy.com
indianmuseum-calcutta.org
lingdianxs.cc
livelorecompensa.info
lpgvitrakchayan.in
lufthahnsa.de
lufthansad.de
lufthansade.de
made-lv.com
mapiexpertise.com
mekonsportswear.com
mspclamps.com
okumurak.net
qhmsgl.com
rains.com.au
rossma.de
rtln.de
sectorexport.com
senile-demenz.de
silvercreekgolfcarts.com
stachowskisausage.com
staedl.de
stephan.eu
sw40hx.com
tarifvergeich.de
testbreichte.de
theambassador.com.au
web-newtype.com
xn--sinnessprche-llb.de

Other certificates including the domain name decisions.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for decisions.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362876988809534347887881695184834610159043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 22:29:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-30 22:29:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decisions.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755108825007918114749490028887292900599142282117360649811567528380636677344158451918587063704828248980766117149515428626866852893673135744960657762227271996875416574063260657190709467764895701241066170522404922045265873971045792014686291902466567975771768051297549085801135765752315168411812944013854695681672980015679279638895488177015244874785147722251691519208935773275130996134681764136978380227311469389535607377930650033836639044258750215560997198142680436970357726157509689424423767743593719295495731911589577332528295766791954320196567567423215766535767910585968511938561699227544600582178591700741080291778871369596731594377496738621507294501643890602196420529152525416358684844287923363795695776723839181578808296619559898141091874871168333342469674061815739918712474596810443350745562699385090496954732339685814114226823540755874148766054991476042669273331365289842651251632200028181274081327657991097529130635587193470324694173827153095264633697938906978575759080670843446897955487939658455244595435496393252051169849174722583687605034791578397417255383694231612831834007532005098179482773558577126978033243085847474415127239267255678887302605210989200027226119111210747740334374777363515626395896378555444597986334755429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3991691d9b8df4225bba51a7188679de3f7a45c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1868 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aberturasdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultdiapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aemco.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ager4nc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aislingweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arschlochbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boldest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bubbleled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukkotapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chateaudebeauregard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clownillustraition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conservenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dastiplasti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.district1forherbold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotikfilmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotikshops24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erziehungsbeauftragung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florens2010.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footballers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grant8718pharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianmuseum-calcutta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lingdianxs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livelorecompensa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpgvitrakchayan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthahnsa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.made-lv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapiexpertise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mekonsportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mspclamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okumurak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qhmsgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rossma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sectorexport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senile-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvercreekgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stachowskisausage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staedl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stephan.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sw40hx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarifvergeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testbreichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theambassador.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web-newtype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sinnessprche-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberturasdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultdiapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aemco.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ager4nc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislingweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arschlochbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boldest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubbleled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukkotapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chateaudebeauregard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clownillustraition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dastiplasti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'district1forherbold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotikfilmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotikshops24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erziehungsbeauftragung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florens2010.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant8718pharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianmuseum-calcutta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingdianxs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livelorecompensa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgvitrakchayan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthahnsa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'made-lv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapiexpertise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekonsportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mspclamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okumurak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhmsgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sectorexport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senile-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvercreekgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stachowskisausage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staedl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephan.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw40hx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarifvergeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbreichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theambassador.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-newtype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sinnessprche-llb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fd6234148000004030046304402201cd02536b528ef694d37f16597640d4319fc44de2b9909a76d803c47fe4d906c02204d25e84dff456998785d4899c43073bf1e0a6648e6d955e6cf383e6b20d5f42300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fd623417700000403004730450221009372e9fa38cac113639a88417411b98b0eabbe87deb06d6e59d1651d7320dedd022007c2404b9e380e64ff18a2457d7a6fcca73bd6576ee1683b067f549ba09c6040
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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