www.franguys.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:02:f1:00:dd:4f:f4:67:15:f7:72:9f:2e:4c:a1:21:a9 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.franguys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:02:f1:00:dd:4f:f4:67:15:f7:72:9f:2e:4c:a1:21:a9
Serial Number (int): 317487358154304231832670042885714016805289
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:0f:1a:65:fa:32:aa:6c:a9:3b:eb:77:87:73:7c:f3:be:83:e5:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:f9:25:a7:14:f6:05:f2:33:c4:44:8a:31:2b:0c:0c:db:aa:20:ff
Fingerprint (sha256): f8:ed:f7:73:1d:33:ee:bf:50:cf:e8:96:9d:18:f4:17:71:3c:e5:f6:1f:e6:06:90:92:20:9c:e8:30:27:e7:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.franguys.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.franguys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2d.cad-deutschland.de
3d.cad-deutschland.de
app.cad-deutschland.de
architektur.cad-deutschland.de
bimworld.cad-deutschland.de
blech.cad-deutschland.de
bricsys-conference.cad-deutschland.de
cad.cad-deutschland.de
cloud.cad-deutschland.de
elektro.cad-deutschland.de
fh.cad-deutschland.de
gis.cad-deutschland.de
intergeo.cad-deutschland.de
privacy.vintcer.com
studenten.cad-deutschland.de
www.212oddjobs.com
www.armstrongpr.co.uk
www.azaads.co.uk
www.beckburychippy.co.uk
www.beethai.co.uk
www.beethaimassage.co.uk
www.bestintowntakeaway.co.uk
www.bjdigitalconsulting.com
www.brownsoverfishbar.co.uk
www.cityofoaksdental.com
www.ctbsgroup.com
www.depiramidemenen.be
www.dietistenpraktijkoudzuid.nl
www.dreamhousevisions.com
www.edlremodeling.com
www.expert-enz.ch
www.expressomapperley.co.uk
www.filipay.net
www.forevermemoriesbym.com
www.franguys.com
www.freshandchips.co.uk
www.getarboedits.com
www.goennerverein-villabuel.ch
www.hnozentrum-dachau.de
www.htmmedtrans.com
www.jimmystipton.co.uk
www.jrosadonotary.com
www.karmafitness.no
www.katieschippy.co.uk
www.kerilogix.co.za
www.kingscatch.co.uk
www.lightbrothersmoving.com
www.liveandletpiearnold.co.uk
www.manorpizzastapleford.co.uk
www.medicineone.net
www.meridenfishandchips.co.uk
www.millenniumfishbar.co.uk
www.mrfishwheatley.co.uk
www.myomme.com
www.ninosbellybuster.co.uk
www.nkonyeni.co.za
www.oakdalechippy.co.uk
www.oceanbluekirkby.co.uk
www.oceanbluesutton.co.uk
www.oceansmaltby.co.uk
www.octaviostrive.com
www.onewishphotography.com
www.papasfishbar.com
www.pekinghousemapperley.co.uk
www.piscesclipstone.co.uk
www.pourvinonhops.com
www.raddius.in
www.reniervanheerden.com
www.rlcpaintersnmore.com
www.robinhoodplaice.co.uk
www.russellsignage.com.au
www.saberling.company
www.sg-parkcolonialofficial.com
www.sg-riverfrontresidences.com
www.shinpa.jp
www.skiclub-doppleschwand.ch
www.softport.net
www.streetlyvillagefishbar.co.uk
www.thedjishere.com
www.tncevents.us
www.villagepizzapenkridge.co.uk
www.woh.nu
www.woodthorpetandoori.com
www.zealimports.com
www.zorbiant.com

Other certificates including the domain name franguys.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.franguys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAlPzTf0yvtuTB8Q1As+
mib68bGqYkeaG/LX38+37L3KnuUPlMKXTo5h3i3hfrIO7R1BdNlR+22K2rbbZHk7
4wZW0d28B4ZJJvx3VU7Ey5NiStc38qok+vw+eSB6ppj/7Gpmloi67cHoN50aWlrH
q/aq9cJGYj3FHWc/I8nO2QiSwFZ1IQI5Q3n42DF0fuoOQIS5zcRdXKKjl+8JrLt3
2cWExBZI8aJ+RxPAo028seq0N0XVG/T9+y0ybIS04WZAtxSV6xTHsO/dx5piA0/q
qbjMtkCscRVSQuM0Qk1+5Eh5Mb0VtBp+gjRjkNdfgno5NXETfTmj1U908h/02UoT
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317487358154304231832670042885714016805289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 23:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 23:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.franguys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22222533456829465179524996056137759243519763902341403073647517810090561075588570134152846699498623634882463995022218255575810222638284801868028633468520219230367203903367029526518723618011255328074244446151964234966793981113949363231226891023832103994537262605977933759595389734106296379134790326318915138838489844291582241718577814656614934648092209018447529178111803258477840315455490937651368057114344458044717773050695616755366826382428641840904378994651854381790774016713942329525978259732221816741737214691391535850491591409920693492788841023498800862300599925712458868391531442361538021783359714682606031868767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							410f1a65fa32aa6ca93beb7787737cf3be83e5fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2d.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3d.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architektur.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bimworld.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blech.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bricsys-conference.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elektro.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intergeo.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.vintcer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studenten.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.212oddjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armstrongpr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azaads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckburychippy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beethai.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beethaimassage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestintowntakeaway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bjdigitalconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownsoverfishbar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofoaksdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctbsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depiramidemenen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dietistenpraktijkoudzuid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamhousevisions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edlremodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expert-enz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expressomapperley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filipay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forevermemoriesbym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshandchips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getarboedits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goennerverein-villabuel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnozentrum-dachau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htmmedtrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jimmystipton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jrosadonotary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karmafitness.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katieschippy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerilogix.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingscatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightbrothersmoving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveandletpiearnold.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manorpizzastapleford.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicineone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meridenfishandchips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millenniumfishbar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrfishwheatley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myomme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ninosbellybuster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nkonyeni.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakdalechippy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbluekirkby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbluesutton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceansmaltby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.octaviostrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onewishphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papasfishbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pekinghousemapperley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piscesclipstone.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pourvinonhops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raddius.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reniervanheerden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rlcpaintersnmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robinhoodplaice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russellsignage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saberling.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sg-parkcolonialofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sg-riverfrontresidences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinpa.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skiclub-doppleschwand.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streetlyvillagefishbar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedjishere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tncevents.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagepizzapenkridge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woh.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodthorpetandoori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zealimports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zorbiant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c35f4024b0000040300473045022015df4872bcc4e46ca136d052330006674d7613e17d0f12458f56040154fa75b9022100c8acd250d09caabd5ca876e59c28c6f0ce58b5c378e998d3de1a96238ea28396007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c35f40048000004030046304402205a936c4c00cf84b84a5dc22ce7364894d81dbeec94b44ac357fd0b428a56028e0220224039e8d6e4b957dcf8fce51b3e5a970a8f76eea9abf87cccb1a90648948b73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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