2kmovi.cc

Issued by R3

About this certificate

This digital certificate with serial number 04:7b:0e:8d:b0:a1:ae:c3:7f:7f:b8:3c:4b:2a:9e:13:92:3e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=2kmovi.cc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:7b:0e:8d:b0:a1:ae:c3:7f:7f:b8:3c:4b:2a:9e:13:92:3e
Serial Number (int): 390323219746628370967237798075242514715198
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:3f:48:7a:ff:43:42:35:c3:78:90:af:5e:0e:2d:ae:ac:ab:89:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:dc:3f:b9:f1:0b:33:f5:af:b2:7d:dd:9a:08:8e:85:ea:7b:24:3a
Fingerprint (sha256): 07:26:b1:87:b4:55:e9:a5:bc:67:84:e3:57:a5:58:a1:3d:dd:0b:fe:62:6d:d2:57:3b:10:63:4f:3f:fc:14:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 2kmovi.cc

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2kmovi.cc

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2kmovi.cc
*.animallifelinepa.org
*.annoce24.de
*.australianguidedtours.com.au
*.backroom.com.au
*.barbesandnoble.com
*.bookstand.com.au
*.calligraphers.com.au
*.casperzew.co
*.catchers.com.au
*.chinesehospital.org
*.connectlahey.org
*.creagslist.org
*.downturk.biz
*.e-biz.com.au
*.ehevotzen.de
*.flash-filter.net
*.gairomeo.it
*.guiltfreetakeaway.co.uk
*.invaluable-narration-to-examine-today.info
*.kamasutraonline.de
*.libero-mail.it
*.lumpektomie.de
*.milzarsflorist.co.uk
*.nestmattress.com.au
*.philippinearena.net
*.prinzessinenkleider.de
*.qustodi.com
*.rye.net.au
*.stadiumguide.de
*.termeco.info
*.theshiremoortandoori.com
*.thesuninnnewbottle.co.uk
*.wohngen.de
*.wohnund.de
*.xn--acai-dit-6za.de
*.xn--badewasserqualitt-5qb.de
*.xn--birnenbrste-0hb.de
*.xn--blechtren-v9a.de
*.xn--flgew-lva.de
*.xn--herbsthuser-r8a.de
*.xn--lufthrner-47a.de
*.xn--lwenzahnhonig-imb.de
*.xn--nasenflten-kcb.de
*.xn--peelingbrsten-3ob.de
*.xn--privatkindergrten-2qb.de
*.xn--rentabilittsvorschau-kzb.de
*.xn--sauerkrautdit-mfb.de
*.xn--schlfenbein-o8a.de
*.xn--stromerhhung-cjb.de
2kmovi.cc
animallifelinepa.org
annoce24.de
australianguidedtours.com.au
backroom.com.au
barbesandnoble.com
bookstand.com.au
calligraphers.com.au
casperzew.co
catchers.com.au
chinesehospital.org
connectlahey.org
creagslist.org
downturk.biz
e-biz.com.au
ehevotzen.de
flash-filter.net
gairomeo.it
guiltfreetakeaway.co.uk
invaluable-narration-to-examine-today.info
kamasutraonline.de
libero-mail.it
lumpektomie.de
milzarsflorist.co.uk
nestmattress.com.au
philippinearena.net
prinzessinenkleider.de
qustodi.com
rye.net.au
stadiumguide.de
termeco.info
theshiremoortandoori.com
thesuninnnewbottle.co.uk
wohngen.de
wohnund.de
xn--acai-dit-6za.de
xn--badewasserqualitt-5qb.de
xn--birnenbrste-0hb.de
xn--blechtren-v9a.de
xn--flgew-lva.de
xn--herbsthuser-r8a.de
xn--lufthrner-47a.de
xn--lwenzahnhonig-imb.de
xn--nasenflten-kcb.de
xn--peelingbrsten-3ob.de
xn--privatkindergrten-2qb.de
xn--rentabilittsvorschau-kzb.de
xn--sauerkrautdit-mfb.de
xn--schlfenbein-o8a.de
xn--stromerhhung-cjb.de

Other certificates including the domain name 2kmovi.cc

(limited to 100 certificates)
2kmovi.cc
2kmovi.cc
2kmovi.cc
2kmovi.cc
2kmovi.cc
bonafides.eu

Certificate

The complete raw certificate details for 2kmovi.cc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390323219746628370967237798075242514715198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 18:46:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 18:46:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2kmovi.cc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854888181727544212594082680849231960750416064772882174483755376140565569401713025882064483746788577146684140487774222167885747164408763820051423907683208411311306761079930144630524191917330643730330930128803592554151717733486083089344132138204490567826876472059541295317196636931650461681577659548878940695048737306800241522812953858029994919418721732758208471206466107127725411609407469823833228973245269865893556230606692755558577823577556232187459399538026162536038624074122835809871625359317762669498347560539632809591768316159563119632551570983417454739341270460083385699166466143559265182393752460810972678582209844994724761470473688040935924122139127341317234067949717315631528697974368696927176441241763004638779513642085402016624143830512934302305713362605539272524572802136717406336015139300835394486707424197382384108524997416908240316198897776950534490793621450286183575508606773613093149269114706932418343756695034742839867899678376521586097304172628190191755436081300173402258906084344606061397640789297719725846811103381499383862063704571501514851229667512392839269052449375552892396060077516453733743737487984736773930984728376604325465250195578059854642207986165091847444597918770383481554854229769970497056744170501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							603f487aff434235c37890af5e0e2daeacab89ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2kmovi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animallifelinepa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annoce24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australianguidedtours.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backroom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbesandnoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookstand.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calligraphers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casperzew.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catchers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinesehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectlahey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creagslist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downturk.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-biz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehevotzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flash-filter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gairomeo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guiltfreetakeaway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invaluable-narration-to-examine-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamasutraonline.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libero-mail.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumpektomie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milzarsflorist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestmattress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philippinearena.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prinzessinenkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qustodi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rye.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stadiumguide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.termeco.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theshiremoortandoori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesuninnnewbottle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wohngen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wohnund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--acai-dit-6za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--badewasserqualitt-5qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--birnenbrste-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blechtren-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flgew-lva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--herbsthuser-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lufthrner-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lwenzahnhonig-imb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nasenflten-kcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--peelingbrsten-3ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--privatkindergrten-2qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rentabilittsvorschau-kzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sauerkrautdit-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schlfenbein-o8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--stromerhhung-cjb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2kmovi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animallifelinepa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annoce24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianguidedtours.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backroom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbesandnoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookstand.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calligraphers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casperzew.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catchers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinesehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlahey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creagslist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downturk.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-biz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehevotzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash-filter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gairomeo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiltfreetakeaway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invaluable-narration-to-examine-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamasutraonline.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libero-mail.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumpektomie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milzarsflorist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestmattress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippinearena.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prinzessinenkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qustodi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rye.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadiumguide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termeco.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshiremoortandoori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesuninnnewbottle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohngen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--acai-dit-6za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--badewasserqualitt-5qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--birnenbrste-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blechtren-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flgew-lva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--herbsthuser-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lufthrner-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lwenzahnhonig-imb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nasenflten-kcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--peelingbrsten-3ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--privatkindergrten-2qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rentabilittsvorschau-kzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sauerkrautdit-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schlfenbein-o8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--stromerhhung-cjb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e2f0d4cbb00000403004730450220221cb9880e99e7390917b4f8e4e4a351e2d4b2a2accf884bb74af3ad17dec248022100a50fbe7f69e429eced711b541c02de9835c4cc3b08c551fbbb3d718c736e9c1300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e2f0d4cff0000040300473045022024efc1cf86a2bc47c7d0f01c3073f192444d47cb97376d6998b72e4057e27eaa022100ac8726a6a1bd96dea091d6b1b70623420aefb4211e6e5626a480fbf3f0b730e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c776005c4640f60f416b6d7aeb5e4ba444048c89effe5a27401c3f892915207f5df5a71da95ed11d6b7958ac3d32c3c198754ce6d7d62853ca6c4a64425ce58b745cf8a1663150c2d88da09b80ae154309abf44bfbf914531f25d31a89f600e42e0f494ec14eb14acfcff7f1db48135a2072e6623ca01b8efe9879f339612144bfe571a68c55d9a9d6c8b2b72d929708a20e5902e47128c3b43b9bdd19c9f1357d176e3dcb029fa1f45bb8fecabf47df3841eccf5f953426ac8c5773df6f3ba190f55d7504ee9b74e30ab06e9746b7540fc0de5f175637e096f670d7df1459138525c7a0be61df78f6f2f625b66ae83d4c939c2782ebe17a8c712bfefa46752