efq.de

Issued by R3

About this certificate

This digital certificate with serial number 04:60:b4:94:ba:2b:87:aa:7e:44:b2:27:11:8c:35:6d:88:a0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=efq.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:b4:94:ba:2b:87:aa:7e:44:b2:27:11:8c:35:6d:88:a0
Serial Number (int): 381356284226604410947915942236980536772768
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:7c:c5:dd:b5:de:4f:49:e0:39:8e:8a:c0:2e:61:fe:8b:a2:32:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:a3:f2:f3:53:15:e8:49:c3:27:25:57:10:0e:83:95:2d:6d:11:84
Fingerprint (sha256): 0b:76:83:a6:cc:cf:fc:21:5b:1c:a3:2c:c8:42:a2:79:ef:4b:ee:d0:c5:8b:eb:06:87:82:2c:64:91:60:bf:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate efq.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for efq.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2030.be
*.atelierfocaccia.com
*.bankruptcygoldmine.com
*.belatingdienst.nl
*.brmine.net
*.byes.biz
*.carbohydrate.au
*.ceoadvisor.in
*.cherrygurl28.com
*.coderoamer.com
*.dattelwein.de
*.demolisherregistration.com.au
*.edom.au
*.efq.de
*.espridog.com
*.financeloans.us
*.genyt.co
*.gesichtsmassagen.de
*.gfx.net
*.gokuit.com
*.goldcoastdoctor.au
*.hier-demain.com
*.hph.be
*.imabe.at
*.judikohnsellsthornhill.com
*.kewali.eu
*.kk778.com
*.krpsc.com
*.lollipop.au
*.magicdocs.co
*.mischievous.de
*.movieshop.co.in
*.onix-web.com
*.parkingprague.info
*.picked-journaltogathertoday.info
*.postservgovtw.com
*.pqaypal.de
*.premenstrual.au
*.prislights.com
*.scentses.co
*.summerinthewinter.com
*.taifatip.com
*.temperaturado.co
*.temporary.com.au
*.theoaktreehutton.co.uk
*.thesnowies.com.au
*.vcostream.net
*.whowillknowit.com
*.widow.au
*.www-norddeich.de
2030.be
atelierfocaccia.com
bankruptcygoldmine.com
belatingdienst.nl
brmine.net
byes.biz
carbohydrate.au
ceoadvisor.in
cherrygurl28.com
coderoamer.com
dattelwein.de
demolisherregistration.com.au
edom.au
efq.de
espridog.com
financeloans.us
genyt.co
gesichtsmassagen.de
gfx.net
gokuit.com
goldcoastdoctor.au
hier-demain.com
hph.be
imabe.at
judikohnsellsthornhill.com
kewali.eu
kk778.com
krpsc.com
lollipop.au
magicdocs.co
mischievous.de
movieshop.co.in
onix-web.com
parkingprague.info
picked-journaltogathertoday.info
postservgovtw.com
pqaypal.de
premenstrual.au
prislights.com
scentses.co
summerinthewinter.com
taifatip.com
temperaturado.co
temporary.com.au
theoaktreehutton.co.uk
thesnowies.com.au
vcostream.net
whowillknowit.com
widow.au
www-norddeich.de

Other certificates including the domain name efq.de

(limited to 100 certificates)
efq.de
rakuto.net
efq.de
asia-club-koeln.de
xn--prrierstab-9db.de
armageddon-chess.online
efq.de
ceoadvisor.in
ceoadvisor.in
eai.de
dzc.de
homos.com.au
ceoadvisor.in
ceoadvisor.in
bankstelcentrum.nl

Certificate

The complete raw certificate details for efq.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381356284226604410947915942236980536772768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:46:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 00:46:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'efq.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779433879569987862327970054467677778013319974088559485229561955775164639179326947233184980752707993839344758240279716917400812484491264587297630843507320580689996087082174370254105953515987712289518314421104149146829477957884100131305944332874256845835304512260592633288142115591162213134855148762797593196594405809910720698793119161327813367682500087923075252109137956867261248701486750479751640846208111268072334591200655646124801504386543763562950991807560216361925476372122757069225250475883415105059995555350002539675156178716590360476567751927084767522162501536472039827158466202394907458695193073873658446381310270870465991266712938756234147539171405074773591235437752987093561871126402534003676791143508930184342567368762102774806440472000446874278879359840467357666156597265363473533691405702365367469754625576718765626213179123374342254129237258437612014324365517538460167731273244497689371629646986915766902887601365791457459683918623052883955728376633173012871126937676300914172549473062160368638616734186797698348006158470108266573492593399704969617279973883457861352081041127679838471897254449407059296189099429977653814048666713573034022457261202917171783831627317222601702577516124550266819042461223471509793191661229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a7cc5ddb5de4f49e0398e8ac02e61fe8ba23255
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1716 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2030.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atelierfocaccia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankruptcygoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belatingdienst.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brmine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byes.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbohydrate.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceoadvisor.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cherrygurl28.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coderoamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dattelwein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demolisherregistration.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edom.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espridog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financeloans.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genyt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesichtsmassagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gokuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldcoastdoctor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hier-demain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hph.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imabe.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.judikohnsellsthornhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kewali.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kk778.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krpsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lollipop.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicdocs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mischievous.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movieshop.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onix-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parkingprague.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picked-journaltogathertoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postservgovtw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pqaypal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premenstrual.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prislights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scentses.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.summerinthewinter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taifatip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temperaturado.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temporary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoaktreehutton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesnowies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcostream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whowillknowit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.widow.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-norddeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2030.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelierfocaccia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcygoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belatingdienst.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brmine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byes.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbohydrate.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceoadvisor.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherrygurl28.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coderoamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dattelwein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demolisherregistration.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edom.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espridog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeloans.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genyt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesichtsmassagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoastdoctor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hier-demain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hph.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imabe.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judikohnsellsthornhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kewali.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kk778.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krpsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lollipop.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicdocs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mischievous.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieshop.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onix-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkingprague.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picked-journaltogathertoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postservgovtw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqaypal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premenstrual.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prislights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scentses.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerinthewinter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taifatip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temperaturado.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoaktreehutton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesnowies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcostream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whowillknowit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widow.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-norddeich.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018af85d3a7e0000040300483046022100eb8c645f662db0810fe4cc1290a2989d5a69a82c9194f466d46c536bed4720b9022100bdb42c72d24efa932514ec2b5a926fc09f4097547e685ef0c39c37a3728cac670076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018af85d3a850000040300473045022100e4bd81fd8bb5724f720a5480a8fd023601cbee65caaa12b2212ce2a4eaf9b8680220107f010a3cf17672f8bd91e502bf0865f5b5554bfd2efe79b53036679e84f994
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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