deenic.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:c5:a2:70:5b:5e:67:6d:a9:8c:96:d0:88:52:6e:55:a5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=deenic.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:c5:a2:70:5b:5e:67:6d:a9:8c:96:d0:88:52:6e:55:a5
Serial Number (int): 331357444360202691044834710803704775071141
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:99:b7:6b:ed:f9:db:99:53:23:bf:50:3a:0e:8d:0b:56:65:c6:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:79:66:4d:c9:1d:e0:06:1e:3b:58:5d:f0:8c:5e:05:e7:a2:42:d2
Fingerprint (sha256): f8:8d:ea:14:30:c2:4c:82:62:0e:18:8f:13:46:3c:ce:ce:63:42:60:c0:9e:53:43:40:fb:10:28:d0:75:74:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate deenic.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deenic.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2ip.net
*.a.tips
*.adisepo.cz
*.akd.de
*.atesl.org
*.bestchecking.net
*.bicycletires.de
*.bitreserve.icu
*.chabad-frankfurt.de
*.dancers.be
*.deenic.de
*.detail.icu
*.displays.co.za
*.drwa.io
*.egf.us
*.elektrogenerator.de
*.fantasiadiferente.com.br
*.foodprocessor.de
*.freegfx.de
*.ftih.eu
*.haartranslantation.de
*.hanmie.tv
*.haushaltsbedarf.de
*.kidstuff.ca
*.licindia.co
*.lopac.nl
*.nugstv.net
*.panvtipny.eu
*.plisse24.de
*.pupil.com.au
*.realreal.co
*.rostocker-zoo.de
*.saree.onl
*.sipel.de
*.stop24.de
*.symplify.de
*.tamilgun.in
*.tapwellbathrooms.co.uk
*.tierhotel24.de
*.transenporn.de
*.trendyrings.net
*.tuervorleger.de
*.whitelinen.net
*.wifelovers.co.nz
*.www-suedtirol.de
*.xn--billogflge-heb.de
*.xn--fingerglck-heb.de
*.xn--nusspltzchen-lcb.de
*.xn--wortbersetzer-zob.de
*.zmn.de
2ip.net
a.tips
adisepo.cz
akd.de
atesl.org
bestchecking.net
bicycletires.de
bitreserve.icu
chabad-frankfurt.de
dancers.be
deenic.de
detail.icu
displays.co.za
drwa.io
egf.us
elektrogenerator.de
fantasiadiferente.com.br
foodprocessor.de
freegfx.de
ftih.eu
haartranslantation.de
hanmie.tv
haushaltsbedarf.de
kidstuff.ca
licindia.co
lopac.nl
nugstv.net
panvtipny.eu
plisse24.de
pupil.com.au
realreal.co
rostocker-zoo.de
saree.onl
sipel.de
stop24.de
symplify.de
tamilgun.in
tapwellbathrooms.co.uk
tierhotel24.de
transenporn.de
trendyrings.net
tuervorleger.de
whitelinen.net
wifelovers.co.nz
www-suedtirol.de
xn--billogflge-heb.de
xn--fingerglck-heb.de
xn--nusspltzchen-lcb.de
xn--wortbersetzer-zob.de
zmn.de

Other certificates including the domain name deenic.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for deenic.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331357444360202691044834710803704775071141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 07:09:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 07:09:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deenic.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808429515166181733090978056207954140211671277486049152689911648228273086499874210140334742454946703984913354156831517763682548362985450826359713138640111639953907662539601198193204733429015346154957987037654698441374671168446333672528544495730964460494256621830354378080840786603808327300700986088190202853346106554296309264218724407921498178027323223547585965933200624691084487452223634919888077148050028697575424148906393303504612019574292743112730683689402647969885285352791329213021343491532785572800302659294762459059681138566297092171744559279970172970326266259390126367858442557781574483299686364148240125505609893410489358074864292013720140812402804953793308182994499453810353892582337153748642261859386010438557594329768791450562028534150204884537607354599174495958908208089773041713895847425011337616944219776664293177805574081658557959611439114337245500299230787520074365696895345481986422641584076028825058003335543692328859021700034704236550365884447635793316668532505724024809533356733328471300661697260127888033361158068828882357554370073469187531845609927448218448593842939203411555915624117874062835836143076655174114691653510094981145842474254500464878751925539273332385621632161278778186417576489952790358011850807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8499b76bedf9db995323bf503a0e8d0b5665c63c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1610 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2ip.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a.tips'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adisepo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestchecking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicycletires.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitreserve.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chabad-frankfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dancers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deenic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detail.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.displays.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drwa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elektrogenerator.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasiadiferente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freegfx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftih.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haartranslantation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmie.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haushaltsbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidstuff.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licindia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lopac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panvtipny.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plisse24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pupil.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realreal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rostocker-zoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saree.onl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sipel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symplify.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamilgun.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapwellbathrooms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierhotel24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transenporn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuervorleger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitelinen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wifelovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-suedtirol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--billogflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fingerglck-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nusspltzchen-lcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wortbersetzer-zob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zmn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2ip.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.tips'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adisepo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestchecking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycletires.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitreserve.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chabad-frankfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deenic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detail.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'displays.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drwa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elektrogenerator.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasiadiferente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freegfx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftih.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haartranslantation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmie.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haushaltsbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidstuff.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licindia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lopac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panvtipny.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plisse24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pupil.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realreal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostocker-zoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saree.onl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symplify.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamilgun.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapwellbathrooms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierhotel24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transenporn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuervorleger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitelinen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifelovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-suedtirol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--billogflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fingerglck-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nusspltzchen-lcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wortbersetzer-zob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmn.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001709f71b120000004030046304402200eab814cdb5db7eadb50323eb92fa0ada6dc3dfa91985b5915f0979bf716f10202205782768243f99180c799be3b3bf1c8c10c94b50597b878f578ed61ae3cffca9400750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001709f71b17f000004030046304402200a4b4260865d42b28d3204adc9435f02a915be268a72a9f787d72f41c572f0b2022008eec670c482e8e220a3d0631c48be2446c980d82a647e951ffaaba9e31b543c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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