equippedtoheal.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e5:da:c1:84:f1:6b:b8:4b:dd:9d:50:83:17:d3:64:12:36 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=equippedtoheal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:da:c1:84:f1:6b:b8:4b:dd:9d:50:83:17:d3:64:12:36
Serial Number (int): 426664582264716096146259166132054830354998
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 36:03:65:1d:22:2f:97:1b:13:e3:bb:a6:9c:15:09:48:cf:fa:e8:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:16:b8:3e:25:b9:44:2e:0a:11:15:d1:ee:7d:af:0c:6a:23:c1:10
Fingerprint (sha256): f8:b3:22:3c:6d:67:72:ac:5b:76:9e:05:4f:81:65:03:d7:64:13:43:16:59:55:e6:ab:d1:b5:0a:e6:df:44:33

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate equippedtoheal.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for equippedtoheal.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.akkawestport.com
*.attwifi.co
*.bglog.me
*.chuang-u.com
*.clarasmilegroup.com
*.cpihts.com
*.dailyrecordco.uk
*.disklessworkstations.com
*.downn-syndrom.de
*.eigenbouwkentekeninschrijven.in
*.elsafoucaud.com
*.enhancedbeautyacademy.com
*.enndometriose.de
*.ennisarm.de
*.equippedtoheal.com
*.furniturecitysuperstore.com
*.hurricaneshelter.com
*.innego.co
*.ipedia.net
*.irap.us
*.kontraktionskraft.de
*.lacantinevalence.com
*.ledtvsoftware.com
*.losangelesproperties.co
*.migaene.de
*.morbus-crohng.de
*.ninjablender.co
*.pcltesting.com
*.retrovillageworldwide.com
*.rugbyautumn.in
*.salvationpraise.com
*.shawmobil.ca
*.simfdinity.de
*.sonnenbrilleh.de
*.stott.net.au
*.swingerclub-wuppertal.de
*.thcoweed.com
*.thewishfulartist.com
*.tnnisarm.de
*.tuemites.com
*.turkishlivetv.com
*.unli-shop.com
*.vahan-tax.info
*.vorhfflimmern.de
*.webarchive.au
*.www-freeporn.info
*.xn--badmlleimer-whb.de
*.xn--glttungseisen-cfb.de
*.xn--strunz-dit-y5a.de
*.y-u.info
akkawestport.com
attwifi.co
bglog.me
chuang-u.com
clarasmilegroup.com
cpihts.com
dailyrecordco.uk
disklessworkstations.com
downn-syndrom.de
eigenbouwkentekeninschrijven.in
elsafoucaud.com
enhancedbeautyacademy.com
enndometriose.de
ennisarm.de
equippedtoheal.com
furniturecitysuperstore.com
hurricaneshelter.com
innego.co
ipedia.net
irap.us
kontraktionskraft.de
lacantinevalence.com
ledtvsoftware.com
losangelesproperties.co
migaene.de
morbus-crohng.de
ninjablender.co
pcltesting.com
retrovillageworldwide.com
rugbyautumn.in
salvationpraise.com
shawmobil.ca
simfdinity.de
sonnenbrilleh.de
stott.net.au
swingerclub-wuppertal.de
thcoweed.com
thewishfulartist.com
tnnisarm.de
tuemites.com
turkishlivetv.com
unli-shop.com
vahan-tax.info
vorhfflimmern.de
webarchive.au
www-freeporn.info
xn--badmlleimer-whb.de
xn--glttungseisen-cfb.de
xn--strunz-dit-y5a.de
y-u.info

Other certificates including the domain name equippedtoheal.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for equippedtoheal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426664582264716096146259166132054830354998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 20:31:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 20:31:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'equippedtoheal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699570972870671760948035548043606534202206522629320833177906723194259427319109242609351214244446691585938129389432513202467256965314472623335370688127239208541136363764410768768312149517998038051832372257029874192304035259345253648192020980092961628430824862959769838232989851167271824415968782154082508618079142173898311487374152556037767416641793891412006998923363448856641214162062140673049372777517982379916808762605999136131690897486852276161901859752428487510453749305230322771395346200374523103459272644519529548541970806680977337740018967021788804110045297633236820137909996582800068249547695858029385766621444092569785981546119381985041374755231463082941177889048778447175154289188420104406771844011450590390490312630743976226508278769918153348209539559450855238057983977336456453095125653080544920535416283529312156305005260866830817916588225853533517432879454618031272868057756029634154324466140039841550408122175741491816203079499954750042662898488787439436357640689887187366218333389615156868474387641420897466760642462510230783247429761796930198151672523964715907369340675831275922417679430611452566244224548901659215452135793075957636911685953363016491010838718677303451828050628313116679833131902721961192007340499381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3603651d222f971b13e3bba69c150948cffae802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1924 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akkawestport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attwifi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bglog.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuang-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarasmilegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpihts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyrecordco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disklessworkstations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downn-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eigenbouwkentekeninschrijven.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsafoucaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enhancedbeautyacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enndometriose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ennisarm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equippedtoheal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniturecitysuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurricaneshelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innego.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kontraktionskraft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacantinevalence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ledtvsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losangelesproperties.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migaene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morbus-crohng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ninjablender.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcltesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retrovillageworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rugbyautumn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salvationpraise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shawmobil.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simfdinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonnenbrilleh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stott.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swingerclub-wuppertal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thcoweed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewishfulartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnnisarm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuemites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turkishlivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unli-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vahan-tax.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vorhfflimmern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webarchive.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-freeporn.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--badmlleimer-whb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glttungseisen-cfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--strunz-dit-y5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.y-u.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akkawestport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attwifi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bglog.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuang-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarasmilegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpihts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyrecordco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disklessworkstations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downn-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eigenbouwkentekeninschrijven.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsafoucaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhancedbeautyacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enndometriose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ennisarm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equippedtoheal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniturecitysuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurricaneshelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innego.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontraktionskraft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacantinevalence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledtvsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangelesproperties.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migaene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morbus-crohng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninjablender.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcltesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrovillageworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyautumn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salvationpraise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shawmobil.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simfdinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonnenbrilleh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stott.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swingerclub-wuppertal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thcoweed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewishfulartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnnisarm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuemites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkishlivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unli-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vahan-tax.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorhfflimmern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarchive.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-freeporn.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--badmlleimer-whb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glttungseisen-cfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--strunz-dit-y5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y-u.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018487816dc40000040300473045022100d68c5b39219a3b8701bdca76fabd31b076e01d99d40e48e56274bed2c2e37cd6022069ed7462083b4b4998b46106232312cf61c827a958a772d06ce73f20921a08d3007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018487816f730000040300463044022059ba033c98c2bb6886e318df4d1e8403dc6a0c2511ed54aceda7747cfff582cf022027be710ce8e030872e05c39321841cf636b36440f84024538b6322e78e4e6c3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00761514632fbc75ae63ed3a3443904957e4ecbfb879a7d7b02999208fe0f7ea9272eeec30e0a7d3882bca9f3ec8e70078c81400df79dab33dac26a751f72414c7e0f688698b65203a2a716e5d1951744008624339562cb11512775461a268e209b7bf68cc605d54f4acf536d1c17c3780154760b712748191d6d336599414ba4a17f0829287e391808f0cf4f9651da6692933b9989b84502b742393b542e0e7084a9b3dd6848159eb83b3015aaa0bcdb2c7e1b14f9807acf3a40f9d22a22756201056408541fa9311a29656c3b391ae54a8e5af8fbe052bb2a25ee7f1d205f4b06a2403781e32851f4939302f7b733c508ceca44e4c592444e63c818edb51b827