billigffluege.de

Issued by R3

About this certificate

This digital certificate with serial number 03:15:b6:03:71:76:e2:ab:d5:64:f5:88:72:6e:68:0c:0a:25 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=billigffluege.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:b6:03:71:76:e2:ab:d5:64:f5:88:72:6e:68:0c:0a:25
Serial Number (int): 268724724874075237701537099344883414207013
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:dd:4a:ba:6e:fc:73:66:59:37:b2:51:fa:06:d9:1d:d1:67:b0:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:27:7b:cf:6d:29:c4:c2:c4:71:45:aa:95:ef:58:8c:69:fb:c5:1f
Fingerprint (sha256): 0b:fa:b8:74:77:fb:88:5a:e8:1e:7b:3c:4d:c1:60:85:55:99:e5:d6:93:b6:10:76:15:c2:d3:fe:1a:e0:08:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate billigffluege.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for billigffluege.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alnpacontractorsafety.com
*.animalcaregarden.net
*.berryoasis.com
*.billigffluege.de
*.billigflug-leipzig.de
*.brennaapp.us
*.brokemilf.com
*.caitlin.com.au
*.canadaoffice.us
*.clubberize.com
*.clumsyseven.com
*.dlbarrettandsons.com
*.dyna.au
*.ebaqy-kleinanzeigen.de
*.ebay-kle3inanzeigen.de
*.ebay-kle9nanzeigen.de
*.exlibrisende.net
*.fallbrookautobodyandpaint.com
*.festivalechi.com
*.freeaccounts.website
*.funbrain.net.au
*.indulgence.me
*.infinitiwifi.us
*.iowin-download2.net
*.iptvm3ulinks.com
*.kidsoutdoorgear.com.au
*.laviealafresh.com
*.listeningbiennal.net
*.mactechnes.de
*.maif.au
*.natwst.online
*.nuclearships.com.au
*.printrite.com.au
*.psychotheraie.de
*.radioein.de
*.realcapitalinvestment.org
*.ruslanclip.com
*.sexautos.de
*.skirbble.io
*.slimsmartbar.com
*.stadiumguide.co.uk
*.supermufatto.com.br
*.tamairlines.it
*.tgyunkuang.com
*.unm.us
*.vorfahrt.de
*.wey.au
*.wwwdeichman.de
*.xn--kampfstcke-kcb.de
*.xzyanwu.com
alnpacontractorsafety.com
animalcaregarden.net
berryoasis.com
billigffluege.de
billigflug-leipzig.de
brennaapp.us
brokemilf.com
caitlin.com.au
canadaoffice.us
clubberize.com
clumsyseven.com
dlbarrettandsons.com
dyna.au
ebaqy-kleinanzeigen.de
ebay-kle3inanzeigen.de
ebay-kle9nanzeigen.de
exlibrisende.net
fallbrookautobodyandpaint.com
festivalechi.com
freeaccounts.website
funbrain.net.au
indulgence.me
infinitiwifi.us
iowin-download2.net
iptvm3ulinks.com
kidsoutdoorgear.com.au
laviealafresh.com
listeningbiennal.net
mactechnes.de
maif.au
natwst.online
nuclearships.com.au
printrite.com.au
psychotheraie.de
radioein.de
realcapitalinvestment.org
ruslanclip.com
sexautos.de
skirbble.io
slimsmartbar.com
stadiumguide.co.uk
supermufatto.com.br
tamairlines.it
tgyunkuang.com
unm.us
vorfahrt.de
wey.au
wwwdeichman.de
xn--kampfstcke-kcb.de
xzyanwu.com

Other certificates including the domain name billigffluege.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for billigffluege.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268724724874075237701537099344883414207013
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 03:04:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 03:04:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'billigffluege.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917970614111568954242896650370047619707039044650717734302277873546225865338378964079311604240019925807645989818113280537415397772448339029230609294859118683237735303295996741227446220988052542762011340071542680795360829552878148312442041120552980157809499714236342767056922564881410405160627720012491389049137875070541991668294810119776351007717624791404642983869563736761749628760306334376817537749325090952646892671948719462246871195295625295457092449108502536229052578541789795158358117009598027571695820809726189067375219407515355498445102966619001066791720723466884020378188674874533815410977994093750611385202204523040523279548651830411684725981568365364498264680993838035473713266398784083936047907031413989905951376540537611337297508098901824918362419306411224547960500749753239738394239361615121094888185904215555780447166671158841722868888493094075456794135276564091550736646932364270752714706606076856666929091472816047020976592827211188970669089635840151564269727225945792947055264256217922341502364763663460214502095077216495163780175688074533484266392337183799613904932807300071990607288184836724345221942922853618040289574767973515087092241595332900112807374494728670102899112867613147899976566306028662943760444964647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49dd4aba6efc73665937b251fa06d91dd167b0f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1894 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alnpacontractorsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animalcaregarden.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berryoasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigffluege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigflug-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brennaapp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokemilf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caitlin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadaoffice.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubberize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clumsyseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlbarrettandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dyna.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaqy-kleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kle3inanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kle9nanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exlibrisende.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fallbrookautobodyandpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.festivalechi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeaccounts.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funbrain.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indulgence.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infinitiwifi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iowin-download2.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iptvm3ulinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidsoutdoorgear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laviealafresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.listeningbiennal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mactechnes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maif.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natwst.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuclearships.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printrite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychotheraie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radioein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realcapitalinvestment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruslanclip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexautos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skirbble.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slimsmartbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stadiumguide.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supermufatto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamairlines.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tgyunkuang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vorfahrt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wey.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdeichman.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kampfstcke-kcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xzyanwu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alnpacontractorsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalcaregarden.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berryoasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigffluege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigflug-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brennaapp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokemilf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caitlin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaoffice.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubberize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clumsyseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlbarrettandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyna.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaqy-kleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kle3inanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kle9nanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exlibrisende.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallbrookautobodyandpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festivalechi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeaccounts.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funbrain.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indulgence.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitiwifi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowin-download2.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvm3ulinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsoutdoorgear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laviealafresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listeningbiennal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mactechnes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maif.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natwst.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuclearships.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printrite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychotheraie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcapitalinvestment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruslanclip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexautos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skirbble.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimsmartbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadiumguide.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermufatto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamairlines.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgyunkuang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorfahrt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wey.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdeichman.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kampfstcke-kcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xzyanwu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afe026efe0000040300473045022017e572ac6947f0eee950c17b9a5c75e077b0615bb3dad731d6a134c853f94d0b022100ccec1ce3b89e1f8d0a59367013cad15b7ca762ef3dd3145c498e3b572e42f14f007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afe026f0a0000040300473045022100a09f20503c3adfb40934fd036cf022208e349e37b524dc841bbde75785baee7c022035b2e2b28e892c3fdbfc3fe9a54128ee03a12b4efc576ebbd125949c018ab165
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00751e4d1e180ccc4c11fa0036b83fcc4a977127f41a872dacd5f13703c9039e0f36271b4476eed46ed79cc7de65c73722a25719b653291d3257bb9e8785c8fd03d4e974e433185580ad1a674c8486e7c73c951715aefe71fa81fbafc11d5416598a5cd4df40bcfcb0f01f412d1dcc66aa0f079e2e901751c09540196e9b2ab1e513b0359d5bf761ddd34ae01b1e7a3a8282f6a79c37c336d781bfd07f60dc56fe1baac0790e1c83f30d087c3fc628bcc184468d1d0f9c89a7cb0785dcd16db907ffeed3c259974239fccbf0cdec5166d900662f5a1625d13b629d6ab5db0646bea8983f2de498799f0e3b5b97f6f2d2872d5475adbec3a9adec8ebf31c4df5827