btw.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:58:52:03:04:13:65:3c:62:4b:a3:59:53:b5:6a:2f:75 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=btw.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:58:52:03:04:13:65:3c:62:4b:a3:59:53:b5:6a:2f:75
Serial Number (int): 307732657589669987486433395085982833454965
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:52:d5:6f:c8:8d:c2:8b:13:b0:c7:48:79:11:03:e2:98:c1:fa:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:5f:6b:b6:28:d5:62:cf:59:00:ba:3f:12:ca:cf:a9:46:ec:f8:1d
Fingerprint (sha256): fa:5b:2e:ea:65:a8:af:e0:ef:a9:ca:62:bd:86:78:5d:d3:ef:1f:43:a5:0c:36:b2:5b:45:ba:1a:dd:70:31:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate btw.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for btw.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1210.icu
*.2040.be
*.4054.icu
*.6802.icu
*.6883.icu
*.6896.icu
*.7886.icu
*.accommodationgeelong.com.au
*.amigo.info
*.aqk.de
*.attornies.com.au
*.avtogidas.lt
*.barndalehotel.co.uk
*.bienen-beute.de
*.broze.cz
*.btw.org
*.contractlaws.com.au
*.data-wakefield.co.uk
*.durocher.net
*.dxu.de
*.editation.de
*.fadafantasia.com.br
*.freneet.de
*.gfe.us
*.heimwerkermarkt.de
*.hno.us
*.homeloanfinance.com.au
*.icht.io
*.k12-nebraska.us
*.k12-newjersey.us
*.kathetersex.de
*.kidsbike.com.au
*.kondicnitrenink.cz
*.ligthningmaps.org
*.portaldeempreendimentos.com.br
*.realator.org
*.sanica.org
*.seriales.org
*.solexworld.nl
*.state-delaware.us
*.techplus.in
*.uhw.us
*.usedcarlistings.org
*.utilitytrailer.com.au
*.vipromo.biz
*.wrbb.org
*.wwwmail-jmldirect.co.uk
*.xn--fremdwhrungen-gfb.de
*.xn--musikhuser-v5a.de
*.xn--vollwrmedmmung-9hbe.de
1210.icu
2040.be
4054.icu
6802.icu
6883.icu
6896.icu
7886.icu
accommodationgeelong.com.au
amigo.info
aqk.de
attornies.com.au
avtogidas.lt
barndalehotel.co.uk
bienen-beute.de
broze.cz
btw.org
contractlaws.com.au
data-wakefield.co.uk
durocher.net
dxu.de
editation.de
fadafantasia.com.br
freneet.de
gfe.us
heimwerkermarkt.de
hno.us
homeloanfinance.com.au
icht.io
k12-nebraska.us
k12-newjersey.us
kathetersex.de
kidsbike.com.au
kondicnitrenink.cz
ligthningmaps.org
portaldeempreendimentos.com.br
realator.org
sanica.org
seriales.org
solexworld.nl
state-delaware.us
techplus.in
uhw.us
usedcarlistings.org
utilitytrailer.com.au
vipromo.biz
wrbb.org
wwwmail-jmldirect.co.uk
xn--fremdwhrungen-gfb.de
xn--musikhuser-v5a.de
xn--vollwrmedmmung-9hbe.de

Other certificates including the domain name btw.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for btw.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307732657589669987486433395085982833454965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 12:56:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 12:56:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'btw.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764277755381624696738808533451019740180951563960225897034919009191979402951736732408929789792745469591173932067716266755551188627450048632687298533519774943052096413947623669820106399248864060584308507483729046025086011778135364271636603883425081419099176271901254304497847960391766816753833514090739731668602895069194738994173381095844962116202512764082156421795643169440049581467094504975911884303763169583873910470543647045968702396070692467044114182965332082590196319688126852799773461974797993574771605057514301627035205611969630396634727883268649439657760264011364870336108461183745819581794503845962462533493563932250174266500157351292177381375780415482495888182895605117172875321912263987629822965562784388820305129762307598285569838452252347886118184046869234941340180836972775998684151393973891255543347070718442208132875067111518253376020258216626107253584476120104100808393271255485600042169015737350352599272431857208321502014045847469235254673903327272688788788233881100687263568355118570079757441824849731761826746113238829140513331150001833076973039872429771138706158854340378188309319594383226277446370370167164745996474616671980116146594286529324448598911124106587809650570964059067807035843374808406097249619653773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9952d56fc88dc28b13b0c748791103e298c1fa93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1686 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1210.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2040.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4054.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6802.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6883.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6896.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7886.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accommodationgeelong.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amigo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attornies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avtogidas.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barndalehotel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bienen-beute.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broze.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contractlaws.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data-wakefield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.durocher.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.editation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fadafantasia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freneet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heimwerkermarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hno.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeloanfinance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icht.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k12-nebraska.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k12-newjersey.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathetersex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidsbike.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kondicnitrenink.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ligthningmaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portaldeempreendimentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realator.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seriales.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solexworld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.state-delaware.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techplus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usedcarlistings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utilitytrailer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipromo.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrbb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmail-jmldirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremdwhrungen-gfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--musikhuser-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--vollwrmedmmung-9hbe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1210.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2040.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4054.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6802.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6883.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6896.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7886.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accommodationgeelong.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amigo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attornies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtogidas.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barndalehotel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bienen-beute.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broze.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractlaws.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-wakefield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durocher.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadafantasia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freneet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heimwerkermarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hno.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloanfinance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icht.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12-nebraska.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12-newjersey.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathetersex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsbike.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kondicnitrenink.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ligthningmaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldeempreendimentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realator.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seriales.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solexworld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'state-delaware.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techplus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedcarlistings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilitytrailer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipromo.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrbb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmail-jmldirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremdwhrungen-gfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--musikhuser-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vollwrmedmmung-9hbe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ac614aa700000040300483046022100be89c992dce37a807969ebc86812d3b9a1d4975c8969bcba253af11981e03fae022100e9b94d47dfad4bd49fe2ef129e0345903134068b52ed7294cd280a607e4cad95007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ac614aa6500000403004730450221008c2f96a3777dfafac760b432c9865af7a69dde6646dd29d1e4c2a04a28b59de602204733c568c0ff0a840bb1ecb0c9a3599f22dfee98d6c890f3d05943be55ea4a7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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