speiseplan.evonik.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:13:65:cf:9b:aa:39:31:6b:33:7e:69:20:b0:26:d5:55 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=speiseplan.evonik.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:13:65:cf:9b:aa:39:31:6b:33:7e:69:20:b0:26:d5:55
Serial Number (int): 289265795847492154102465636806135709619541
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:38:19:fa:e3:8e:e2:40:81:57:0f:6c:28:bd:94:99:af:af:c7:a2
Fingerprint (sha256): f9:a8:fd:09:e7:91:55:11:41:bb:81:19:87:86:5d:4f:7d:7e:27:9a:97:ba:e3:d8:85:63:d6:cc:35:f4:30:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate speiseplan.evonik.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for speiseplan.evonik.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.jawab.app
admin.datz.ro
admin.jitsnotesdev.com
agemaki.reserv.dinii.jp
analytics.posify.in
app-usertesting.agos.tech
app.bazzarro.com
app.easyprof.com.br
app.kotokan.game
articles.unloc.ai
articles.unloc.app
banc10.cat
banc10.com
banc10.es
billing.goruckit.com
cecs550.reifi.co
coinassetindex.com
corescreenqa.kodeblocks.com
creeq.com
criciuma.vm2geo.com.br
cryptomower.com
darbyfulcher.com
dev.mfg.scentconnect.com
dev.scentconnect.com
dfb.loyjoy.com
dynamiclinks.crossover.app
eattrail.com
fcdn.hubwa.re
fellowship-kentucky-staging.clients.joinpromise.com
files.honeag.com
firebasetest.touchgen.co.kr
first-phase-entries.viinikanlahti.weup.city
fleex.app
formakersbymakers.com
google.app.lifx.com
groundtruthlabs.com
hack-page.com
homelearning.arabeelearning.com
hoops-lab.com
icerikkutusu.com
landing.buyerbutler.com
le-clique.com
maria-alfonso.com
mfg.scentconnect.com
mimadatascience.com
myfuture.app
oem4me.com
okrc.hkchakladar.com
pawfectshots.be
pharmercure.it
post.jawab.app
prtesla.opint-dev.cogniteapp.com
qa-1.dadikit.com
qa-2.dadikit.com
qa.mfg.scentconnect.com
qa.scentconnect.com
qualkan.com
report.io
residencia.studus.com.br
samriddhimitra.com
seminary-kursy.by
sms-api-docs.wefast.app
speiseplan.evonik.de
successfularchitect.com
tuinluxe-ruan.be
up.peaks.nl
voice.geeksabio.xyz
vtitielt.noteble.be
web.visitsapp.com
webmail.pawfectshots.be
wedagedara.org
www.banc10.cat
www.banc10.com
www.banc10.es
www.coinassetindex.com
www.cryptomower.com
www.dailyit.com.au
www.eattrail.com
www.esportsmania.com.mx
www.feriaganadera.cl
www.frcbrws.website
www.gammanet.co
www.gift-tech.co.jp
www.groundtruthlabs.com
www.icerikkutusu.com
www.inclusivetour.com
www.innoway.nl
www.lastminuteoffers.com
www.laubelore.com
www.le-clique.com
www.limerence.co
www.packagetour.com
www.pulsar-sd.com
www.siscentral.com.br
www.tkpetersen.com
www.tuinluxe-ruan.be
www.votersbay.com
www.zherh.info
xn--lmandrillen-fgb.com
zherh.info

Other certificates including the domain name evonik.de

(limited to 100 certificates)
evonik.com
survey.evonik.de
corporate.evonik.com
magazin.evonik.de
app-dev.brewwidget.com
altersversorgung.evonik.de
elements.evonik.de
elements.evonik.de
dynamiclinks.crossover.app
altersversorgung.evonik.de
geschaeftsbericht.evonik.de
corporate.evonik.com
ausbildung.evonik.de
elements.evonik.de
geschaeftsbericht2015.evonik.de
ecotrainer.evonik.de
magazin.evonik.de
ausbildung.evonik.de
speiseplan.evonik.de
evonik.de
futurezone.evonik.com
aldi-umfrage.de
verhaltenskodex.evonik.de
aldi-umfrage.de
elements.evonik.de
aerosil.evonik.de
diversity-spectrum.evonik.de
corporate.evonik.com
aerosil.evonik.de
corporate.evonik.com
geschaeftsbericht.evonik.de
magazin.evonik.de
geschaeftsbericht2015.evonik.de
altersversorgung.evonik.de
aldi-umfrage.de
echte-liebesgeschichten.evonik.de
guidelines-wishes.evonik.de
aerosil.evonik.de
elements.evonik.de
verhaltenskodex.evonik.de
survey.evonik.de
ecotrainer.evonik.de
diversity-spectrum.evonik.de
corporate.evonik.com
corporate.evonik.com
ecotrainer.evonik.de
qa-2.dadikit.com
ecotrainer.evonik.de
aldi-umfrage.de
corporate.evonik.com
connect.austrianwebinars.com
aerosil.evonik.de
facilitator.tobeyou.sg
ecotrainer.evonik.de
oat.evonik.de
elements.evonik.de
corporate.evonik.com
geschaeftsbericht.evonik.de
analytik.evonik.de
guidelines-diversity.evonik.de
corporate.evonik.de
geschaeftsbericht.evonik.de
magazin.evonik.de
aerosil.evonik.de
ausbildung.evonik.de
corporate.evonik.com
geschaeftsbericht2015.evonik.de
nachhaltigkeitsbericht.evonik.de
digimat.evonik.com
elements.evonik.de
corporate.evonik.de
softwares.legalizeseven.com.br
evonik.com
verhaltenskodex.evonik.de
guidelines-diversity.evonik.de
www.evonik.de
elements.evonik.de
futurezone.evonik.com
geschaeftsbericht.evonik.de
futurezone.evonik.com
corporate.evonik.de
corporate.evonik.com
www.vahebi.se
www.customstickers.xyz
diversity-spectrum.evonik.de
echte-liebesgeschichten.evonik.de
diversity-spectrum.evonik.de
qa-2.dadikit.com
futurezone.evonik.com
hppo.evonik.de
ausbildung.evonik.de
magazin.evonik.de
geschaeftsbericht2015.evonik.de
analytik.evonik.de
www.evonik.tw
dev-api.tappable.io
elements.evonik.de
geschaeftsbericht2015.evonik.de
magazin.evonik.de
guidelines-diversity.evonik.de

Certificate

The complete raw certificate details for speiseplan.evonik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289265795847492154102465636806135709619541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 13:15:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 13:15:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'speiseplan.evonik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2038 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.jawab.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.datz.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jitsnotesdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agemaki.reserv.dinii.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.posify.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-usertesting.agos.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bazzarro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.easyprof.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kotokan.game'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.unloc.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.unloc.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banc10.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banc10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banc10.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.goruckit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecs550.reifi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinassetindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corescreenqa.kodeblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creeq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criciuma.vm2geo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptomower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darbyfulcher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mfg.scentconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.scentconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfb.loyjoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamiclinks.crossover.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eattrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcdn.hubwa.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fellowship-kentucky-staging.clients.joinpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.honeag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebasetest.touchgen.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'first-phase-entries.viinikanlahti.weup.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleex.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formakersbymakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.app.lifx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groundtruthlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hack-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homelearning.arabeelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoops-lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icerikkutusu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.buyerbutler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le-clique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maria-alfonso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfg.scentconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimadatascience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfuture.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oem4me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okrc.hkchakladar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawfectshots.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmercure.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post.jawab.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prtesla.opint-dev.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-1.dadikit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-2.dadikit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.mfg.scentconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.scentconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualkan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residencia.studus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samriddhimitra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminary-kursy.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-api-docs.wefast.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speiseplan.evonik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'successfularchitect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuinluxe-ruan.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.peaks.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voice.geeksabio.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtitielt.noteble.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.visitsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pawfectshots.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedagedara.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banc10.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banc10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banc10.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coinassetindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptomower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailyit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eattrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportsmania.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feriaganadera.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frcbrws.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gammanet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gift-tech.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groundtruthlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icerikkutusu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inclusivetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innoway.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastminuteoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laubelore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.le-clique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limerence.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.packagetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pulsar-sd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siscentral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkpetersen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuinluxe-ruan.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.votersbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zherh.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lmandrillen-fgb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zherh.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d8cd3ccc0000004030047304502200d975400e8b985016509b9c7b30d03f95886a6e794bee52bdf1dedd248ef4dae02210085e8924009363cccb1e25593f2ea0bcd34beb82008ec8bb7683ba7133e4cc983007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d8cd3cac30000040300473045022100e896c13f7ab4dd028088c86072dd6a3402ab2f67fad4f1e771321d24dde8aa2802201544996ebf0530da52113d64b300008ced83ea448494d04d1fa3d960395302a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002edd3810be757686970c922c6869b7f428186ac6999e825522a52354f9c40cf6fb345c869fe83d844613faa5c1d051137488c86e92b730a3ab579bf44ead2d5f6143d1abf332795489390fc46b3d2ddd8de90e0075d8e34eca0151553d5dcaed041a7a66745a834caeb2a88d490383b739ace22230e13618ffa3e92d53201193cf2ed1b8b39186dfaf9b9b60ef81ea271eb5e9a85b3625e42011f42e8c2d030bc1c0cab9ba9a6e99bfce02b024a0abc8b39a493002f78763f2464fa0aa76958c8f59d59bd5ba900ff836888752ac839f9f4d8990c7e9b626f3b2c2c3d607b8ee29f2adb2cbe36a7377426b7f8b553a91d4f1d03a1be7b54d758f3c5e34d1d9ed