lahodky.sk

Issued by R3

About this certificate

This digital certificate with serial number 04:84:59:93:75:17:10:db:65:94:15:0b:14:c7:e6:99:44:29 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lahodky.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:59:93:75:17:10:db:65:94:15:0b:14:c7:e6:99:44:29
Serial Number (int): 393485483094737314255686684715109687313449
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:8d:66:22:f9:6f:c1:4e:20:a8:7c:33:e9:e7:8b:5b:99:b1:32:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:95:b2:05:57:bd:7e:86:92:0c:4c:22:3f:93:fc:d1:4c:dd:9a:56
Fingerprint (sha256): 03:d2:30:98:3d:c4:8e:49:74:e3:ee:08:dc:83:89:86:b4:52:f1:65:a0:51:f0:93:1a:b4:ff:1c:c9:3c:44:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lahodky.sk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lahodky.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ardunio.com
*.bathroom-suites-accessories.co.uk
*.campaignreform.info
*.clipconventer.cc
*.dmitrenko-sergey.ru
*.domainreport.in
*.ds5d.biz
*.ebay-kleinanzegen.de
*.expresstoil.com
*.flwcv.com
*.fussballergebnisse-live.de
*.grachtenboot.nl
*.granitstein.de
*.hair101beauty.com
*.handwerkerkosten.de
*.heat.co.za
*.homedemolitionsmelbourne.au
*.indianabmv.org
*.joecohen.us
*.jvf.be
*.keratosen.de
*.kountkwik.net
*.lahodky.sk
*.lankybox.uk
*.lightenbox.com
*.likea.biz
*.lithiumtherapie.de
*.mytools4business.pro
*.nnhh.net
*.phoneix.us
*.posotivepromotions.com
*.pride-online.com
*.sandeigo.org
*.specturmbusiness.net
*.tacklemate.com.au
*.tenancyservices.co.uk
*.thesmithssellsc.com
*.tierheim-sondershausen.de
*.tmbelectronics.co
*.tnnitus.de
*.tomaslago.com
*.touchmirrorsok.com
*.valecapregiao.com.br
*.webuyanvan.com
*.wwwflir.com
*.xiaochi.net
*.xn--baustoffhndlerverzeichnis-tec.de
*.xn--sndervig-n4a.de
*.yashadv.com
*.youroregon.org
ardunio.com
bathroom-suites-accessories.co.uk
campaignreform.info
clipconventer.cc
dmitrenko-sergey.ru
domainreport.in
ds5d.biz
ebay-kleinanzegen.de
expresstoil.com
flwcv.com
fussballergebnisse-live.de
grachtenboot.nl
granitstein.de
hair101beauty.com
handwerkerkosten.de
heat.co.za
homedemolitionsmelbourne.au
indianabmv.org
joecohen.us
jvf.be
keratosen.de
kountkwik.net
lahodky.sk
lankybox.uk
lightenbox.com
likea.biz
lithiumtherapie.de
mytools4business.pro
nnhh.net
phoneix.us
posotivepromotions.com
pride-online.com
sandeigo.org
specturmbusiness.net
tacklemate.com.au
tenancyservices.co.uk
thesmithssellsc.com
tierheim-sondershausen.de
tmbelectronics.co
tnnitus.de
tomaslago.com
touchmirrorsok.com
valecapregiao.com.br
webuyanvan.com
wwwflir.com
xiaochi.net
xn--baustoffhndlerverzeichnis-tec.de
xn--sndervig-n4a.de
yashadv.com
youroregon.org

Other certificates including the domain name lahodky.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for lahodky.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393485483094737314255686684715109687313449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 01:34:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 01:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lahodky.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 981466812691918836405696644075442058241074768499323256479654355419424600689121158718964737831191034674561526292642812159236477701549177763597638086121191756767430822932767660311288737507490194379616552839750552599576743216785431125025135933003002104917064025319976901282228977174045043141821073037619549928653287824404881544099692965147590305485067601702220526035698571752486405938486262471292184145350791045945898546329472407917307630521330126772042199980579832012216937951524033681396005584022989475732627774661319277691218475298249422504000555517317449454483890922572784785100236817397413001742545616752116450125251598722217122018259923815292396101796463369347307188993460802257119613042243356955054495571276909151896088494893020621440961507279314371087066456452600954886213503827482588026474211706411661265333838895019091830781550868725088775340553083526783716023301128125771117515357688841274223429270336218549821617501825339593713431885486003730652729102693289731550885812285701815055694359776741963671515107559826538636356773850237953353682339666432373895225021414998262319973357679902541672087678484654659505068255942452037269844652444805922278287189479704991713052576922221369995713530306100159390876524114821147454688442777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e8d6622f96fc14e20a87c33e9e78b5b99b13239
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1894 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ardunio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bathroom-suites-accessories.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaignreform.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clipconventer.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmitrenko-sergey.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainreport.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ds5d.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanzegen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresstoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flwcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fussballergebnisse-live.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grachtenboot.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granitstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hair101beauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handwerkerkosten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heat.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homedemolitionsmelbourne.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianabmv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joecohen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jvf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keratosen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kountkwik.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lahodky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lankybox.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightenbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.likea.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lithiumtherapie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytools4business.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nnhh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phoneix.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.posotivepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pride-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandeigo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specturmbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tacklemate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenancyservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesmithssellsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierheim-sondershausen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmbelectronics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnnitus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tomaslago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchmirrorsok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valecapregiao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webuyanvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwflir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiaochi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--baustoffhndlerverzeichnis-tec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sndervig-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yashadv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youroregon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardunio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroom-suites-accessories.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaignreform.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clipconventer.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmitrenko-sergey.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainreport.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds5d.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanzegen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresstoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flwcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fussballergebnisse-live.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grachtenboot.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granitstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hair101beauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handwerkerkosten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heat.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedemolitionsmelbourne.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianabmv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joecohen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jvf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keratosen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kountkwik.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahodky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lankybox.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightenbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'likea.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lithiumtherapie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytools4business.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnhh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneix.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posotivepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pride-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandeigo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specturmbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacklemate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenancyservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesmithssellsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierheim-sondershausen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmbelectronics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnnitus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomaslago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchmirrorsok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valecapregiao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuyanvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwflir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiaochi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--baustoffhndlerverzeichnis-tec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sndervig-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yashadv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youroregon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018af8896d3e0000040300483046022100de5f59e958b543ade9a3e856f3944d62639b43dfab3976737376a38193eb7a41022100d5a221ada9887622cdb6758f38b23e2d6dce815b392aa9018fd7250852cd2283007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018af8896d5b000004030047304502205fac974d610525d48555e1cf3dc2ec4d71c3d110b8dd4e13a18e6dd2542668cd022100cc8a1a83a4459e656e2cb33f2d35c569efed280368843e1a2d11a4ce02f83068
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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