reiterkappen.de

Issued by R3

About this certificate

This digital certificate with serial number 03:e1:48:e8:b7:67:71:50:6c:12:ea:75:5c:af:be:e9:d5:27 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reiterkappen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:48:e8:b7:67:71:50:6c:12:ea:75:5c:af:be:e9:d5:27
Serial Number (int): 337997303100936115479754689935551784146215
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:55:e7:ee:c9:1c:e9:fb:db:65:ac:ea:77:27:b9:23:0e:ab:32:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:8a:ce:e3:15:45:96:2b:a5:8f:7b:5a:c2:85:ca:bf:14:93:45:b6
Fingerprint (sha256): 05:60:41:d7:46:73:bf:92:af:35:11:ae:06:a4:a2:4c:6e:4d:87:bb:e9:cd:3c:5d:75:d2:3e:fa:ac:84:5f:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate reiterkappen.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reiterkappen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adrija.de
*.aquaterrapark.ru
*.autoskolatesty.cz
*.bth.us
*.cairnsrentalcars.com.au
*.cancan.de
*.dangerousdecibles.org
*.drphone.me
*.e-x.de
*.elitetechsolutions.com.au
*.gesund-und-vitalkost.me
*.hentai-manga.ru
*.hochzeitstaggedichte.de
*.hqx.com.au
*.jug.com.au
*.keratoakanthom.de
*.laserskin.com.au
*.learningspot.com.au
*.luwthansa.de
*.merceds-benz.it
*.mitarv.online
*.mundodafantasia.com.br
*.perfectportraits.com.au
*.reiterkappen.de
*.renin-angiotensin-aldosteron-system.de
*.rustica.com.br
*.sciology.org
*.silvesterkleid.de
*.sleepersofa.de
*.ssquirt.org
*.sustainables.net
*.sustaining.net
*.teachtotravel.co
*.teddyri.co
*.teuton.net
*.videophones.com.au
*.vzr.com.au
*.wassermarken.de
*.webreseller.in
*.windaschenbecher.de
*.wizzaire.de
*.wra.in
*.wwwcommenity.net
*.xn--buchbindegert-mfb.de
*.xn--einkommenssteuererklrung-9bc.de
*.xn--fhrungsseminar-gsb.de
*.xn--fitnessvertrge-hib.de
*.xn--gaderobenmbel-rmb.de
*.xn--kochbuchstnder-fib.de
*.xn--mnnerballet-l8a.de
adrija.de
aquaterrapark.ru
autoskolatesty.cz
bth.us
cairnsrentalcars.com.au
cancan.de
dangerousdecibles.org
drphone.me
e-x.de
elitetechsolutions.com.au
gesund-und-vitalkost.me
hentai-manga.ru
hochzeitstaggedichte.de
hqx.com.au
jug.com.au
keratoakanthom.de
laserskin.com.au
learningspot.com.au
luwthansa.de
merceds-benz.it
mitarv.online
mundodafantasia.com.br
perfectportraits.com.au
reiterkappen.de
renin-angiotensin-aldosteron-system.de
rustica.com.br
sciology.org
silvesterkleid.de
sleepersofa.de
ssquirt.org
sustainables.net
sustaining.net
teachtotravel.co
teddyri.co
teuton.net
videophones.com.au
vzr.com.au
wassermarken.de
webreseller.in
windaschenbecher.de
wizzaire.de
wra.in
wwwcommenity.net
xn--buchbindegert-mfb.de
xn--einkommenssteuererklrung-9bc.de
xn--fhrungsseminar-gsb.de
xn--fitnessvertrge-hib.de
xn--gaderobenmbel-rmb.de
xn--kochbuchstnder-fib.de
xn--mnnerballet-l8a.de

Other certificates including the domain name reiterkappen.de

(limited to 100 certificates)
reiterkappen.de
sleepersofa.de
reiterkappen.de
wassermarken.de
quantitysurveyorperth.com.au
teuton.net
reiterkappen.de
commercialwashingmachine.com.au
reiterkappen.de
wassermarken.de
reiterkappen.de

Certificate

The complete raw certificate details for reiterkappen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvQ3awdbu2jyydpB0d/xV
4ga+PfnoeEpM7pj78TtniLqPKAQTAeafO65vCEB7+TOsIyRTABrKmBas6fyUZ0ZQ
kNmrx7Nbl4WlfDVlY7XpxQFG5eI0ew0UGD8MQasLi86FMpE6j0gIXgY6JkF3KyxL
roH57svRghOJocaOYmncg2FSZsT0eJXJhlZyMOyHrEugyZGGYUT8n9fP1IKpP7zq
A5l3Xc3kww3/3qfRqhrXB/OIz+yXCCcKYsqQ6ds24JBfacKW4MnS8Y11Rvxd8O08
MYLiDP7xdyw31XDP8ykncb34kDMbqx8TXOW/RfmndHFAm7Oigx8ce5Nj6kFE1vmi
GolO8gASN+VGAp0MnipN8/7ZzfpMeC8DWCcteY1R/OJJnwkYQ0UUMWLk6cMZewP4
UyVuJQRVirVayFa/3+etxMOimDuMzdGsBMwL9LUbJCfPCXTOm0bSd+brFNii39jV
3e2EGMcrtczkui5NLEAuMisxRonCFADpU69CAKZ3Bmkh87BLjfniLvdmvWGBEjL+
vBFPyzPwrfkypzdRJFfISIBX2RdiQIKxfYhFWt+urV+dLLcvWuZ8nrFYBGhTHXjr
NuwLCo3D1ps3YjqcFBzCK6bfKs8P/461nCTQixObk3/otgvh4rB1ZcBChfz6MtLf
XJMLr8pZ/pgpz/2IiyfrXpcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337997303100936115479754689935551784146215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 10:35:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 10:35:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reiterkappen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771273516009643605097887693055306604471426723512547662222651869559590474167235914295271948087693658359862641939518556594562070445359987553083355380748420076400687528917056734978423246705360688945552177487650524375073049685944691971400937179974612377776634648318105418941071048654531832725585751038561969459047680653013254983440796342359346971663189641980241973726853588404089052958415221969712216688724793322447008404205299331156430841866286158504785439759019829201805087660733277196867562655711698203903596054410566360960223379463683165504226209195435614265937363970319391529275155965501497236416210738560521964289015029184562030580736816288169709556503589128823269128227065561241977355222959794301062181649051173000539727990099500540371372289504231767072869632414314712104500508009688492164983124996377731919860596569281322051578052563698264749728259317406896004844819260604341305347632120353814374787938510913758274491239583958939833740313773144500349873065249815169727720503629973624661341795663324938285985839031574653714072337527058942434215884419536416022201863674811928403226028735935636622880068624861733178498804235419546558907450331456003341495301778915601409122861417928358739726407532636589898193728046152305693057310359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3955e7eec91ce9fbdb65acea7727b9230eab3226
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1976 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adrija.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquaterrapark.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoskolatesty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cairnsrentalcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dangerousdecibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drphone.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-x.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitetechsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesund-und-vitalkost.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hentai-manga.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hochzeitstaggedichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jug.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keratoakanthom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learningspot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luwthansa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merceds-benz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitarv.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundodafantasia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectportraits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reiterkappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renin-angiotensin-aldosteron-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rustica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvesterkleid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleepersofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssquirt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustainables.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustaining.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachtotravel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teddyri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teuton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videophones.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vzr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wassermarken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webreseller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windaschenbecher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wizzaire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wra.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcommenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--buchbindegert-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--einkommenssteuererklrung-9bc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fhrungsseminar-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fitnessvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gaderobenmbel-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kochbuchstnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mnnerballet-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adrija.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaterrapark.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoskolatesty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cairnsrentalcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dangerousdecibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drphone.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-x.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitetechsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesund-und-vitalkost.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hentai-manga.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochzeitstaggedichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jug.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keratoakanthom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningspot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luwthansa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merceds-benz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitarv.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundodafantasia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectportraits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reiterkappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renin-angiotensin-aldosteron-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rustica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvesterkleid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepersofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssquirt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainables.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustaining.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachtotravel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teddyri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teuton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videophones.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wassermarken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webreseller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windaschenbecher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizzaire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wra.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcommenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--buchbindegert-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--einkommenssteuererklrung-9bc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fhrungsseminar-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fitnessvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gaderobenmbel-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kochbuchstnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mnnerballet-l8a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e2d4b75200000040300473045022100993ee278fcfe969d16e32acad1d32321ff4537b323a6dd3b8888c970d5bdaea9022053cb185ff330971befa7ce4b817c667406c03b02a425770467552ad756cf18f6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e2d4b752100000403004730450221009d7ade6538578b89785073229cefc29f19846fb01e67a520f09617d7a7ee4a9602201df37f59e758c9c5f6405e82a4c617f02259b633b267c00c1ca1557327e93fe8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0099056e0276866c70ba7e931bd87cf2ee35c49b67f2a3a3e618173d5d158f6d7014326dcdd4f29236ac4b7e17a4a8fb833f465d42e32c8161e4c106154c82698c7e22d23f050e381e2212cb4a5207db73dcd2822c4ee6fa46543ca55dffd6ba525e4ce4d80c7c74c1586a35f7748ba8416f65622957319d6ce7a52e267a72fccc10bb2d07ad4cd3b77857b7cf8d516ccfd3a76faafa91c2e0bd1a7449f6ac36edb05147606fc632ed5a16850b55184819c29cdb82d9ff8527cf1441f7b3e9af028e8e886eda552b116a900a29532ec7856e54d5c8025af0a0963d19701fae2033009df0723a118347ab6c56bf243f089bb4e8141fe4aaecb5bb8cdb7cb23dea61