onedata.in

Issued by R3

About this certificate

This digital certificate with serial number 03:58:ea:6b:ee:03:07:b0:1f:a3:16:31:63:51:3d:06:76:b2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=onedata.in

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:ea:6b:ee:03:07:b0:1f:a3:16:31:63:51:3d:06:76:b2
Serial Number (int): 291593305838554407737519542500765594973874
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:67:6f:cb:81:79:ac:13:fe:0d:60:a3:48:b8:bf:63:10:48:19:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:07:92:32:96:ce:c5:fc:69:7c:94:33:c9:43:1f:02:7f:b2:fb:70
Fingerprint (sha256): 0d:c0:81:1a:52:56:fc:f3:f8:38:b0:6a:93:82:3c:0d:31:06:0b:87:d5:9e:42:02:52:ca:6d:84:53:0f:d5:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate onedata.in

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onedata.in

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.16osobnosti.com
*.aazo.co
*.badassdownloder.com
*.brutelsoftware.com
*.buymedicbot.com
*.byronianislive.com
*.cerroweire.com
*.channl4.com
*.cod3.org
*.ebay-kleinanziege.de
*.emoterezer.com
*.engagementringandthings.com
*.farnell.es
*.fxv.de
*.g-p.de
*.gamer-sind-keine-verbrecher.de
*.gametwit.de
*.gbj.de
*.gcq.de
*.gelisims.com
*.genesisone-net.com
*.hdmovies2plus.com
*.ihcp2e.com
*.itesl.org
*.karzylist.com
*.krunker.site
*.lorensen.eu
*.mohamadfirstpage.com
*.myexasoltest.com
*.mynoteforcash.com
*.mzlalaresturaunt.com
*.on6edrive.com
*.onedata.in
*.otikon.de
*.pawfect.com.au
*.popofhope.com
*.schwimmwindeln.de
*.spiewaren.de
*.steuererklae5rung.de
*.telekomunikasi.net
*.thelittleonmountain.com
*.therobosft.com
*.tonaudiogramm.de
*.unterwasserspiele.de
*.what.de
*.xn--bauernkche-geb.de
*.xn--frstisch-1za.de
*.xn--hompatie-p4a.de
*.xn--insolvenzverffenlichungen-9rc.de
*.yes47.net
16osobnosti.com
aazo.co
badassdownloder.com
brutelsoftware.com
buymedicbot.com
byronianislive.com
cerroweire.com
channl4.com
cod3.org
ebay-kleinanziege.de
emoterezer.com
engagementringandthings.com
farnell.es
fxv.de
g-p.de
gamer-sind-keine-verbrecher.de
gametwit.de
gbj.de
gcq.de
gelisims.com
genesisone-net.com
hdmovies2plus.com
ihcp2e.com
itesl.org
karzylist.com
krunker.site
lorensen.eu
mohamadfirstpage.com
myexasoltest.com
mynoteforcash.com
mzlalaresturaunt.com
on6edrive.com
onedata.in
otikon.de
pawfect.com.au
popofhope.com
schwimmwindeln.de
spiewaren.de
steuererklae5rung.de
telekomunikasi.net
thelittleonmountain.com
therobosft.com
tonaudiogramm.de
unterwasserspiele.de
what.de
xn--bauernkche-geb.de
xn--frstisch-1za.de
xn--hompatie-p4a.de
xn--insolvenzverffenlichungen-9rc.de
yes47.net

Other certificates including the domain name onedata.in

(limited to 100 certificates)
xn--bauernkche-geb.de
onedata.in
spermbanks.com.au
ibmotor.co.uk
onedata.in
lorensen.eu
visumforchina.org
onedata.in
upsell.com.au
spermbanks.com.au
onedata.in

Certificate

The complete raw certificate details for onedata.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291593305838554407737519542500765594973874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 12:10:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 12:10:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onedata.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663611163174350065274834495581967076939375649264312832328494408880078257325806630170743010334705550758011156388864474055503157732178444923537536020878147347607025781049359945436197376038643687148650770512863220805596456831797099068512485944986718436330732697417687939976880229338660519258445212990350851961179888162943389151276398534452008742203660576239572144093880758779376695963223217132630559222008046793456728941526390271083174018336933863302082550701360484906471874765241610425356224393383505307077486223810101502065115290179894439343003115291285812155652446873167562668854446164583799368709350234101580574676928689105389325102443031848339557881512253731065277456501410740136004556688573715918536150842587582512150179123694299344635642845570797149600958791008441430014742008755338114674546078120677854298107490153091087481433857164630459420097348544639103954924928629147843299848610168445271255262918050777681355180999769779348748666622272757755985888437851517954883086443595604712662458692392320521082414786392896905482981265743621248892177996921371966004056592072872376680897791897279443839610554912118663846004675276234530929222154241586766379875515731975713080886445375509074529925796714072251981107558259049983592967158831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d676fcb8179ac13fe0d60a348b8bf6310481953
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1796 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.16osobnosti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aazo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badassdownloder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brutelsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buymedicbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byronianislive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerroweire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channl4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cod3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanziege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emoterezer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engagementringandthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farnell.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g-p.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamer-sind-keine-verbrecher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gametwit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gbj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gelisims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genesisone-net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmovies2plus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihcp2e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karzylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krunker.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorensen.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mohamadfirstpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myexasoltest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynoteforcash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mzlalaresturaunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.on6edrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onedata.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otikon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawfect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwimmwindeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiewaren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuererklae5rung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telekomunikasi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelittleonmountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therobosft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonaudiogramm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unterwasserspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.what.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bauernkche-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frstisch-1za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hompatie-p4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--insolvenzverffenlichungen-9rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yes47.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16osobnosti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aazo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badassdownloder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brutelsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buymedicbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byronianislive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerroweire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channl4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cod3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanziege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emoterezer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engagementringandthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farnell.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g-p.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamer-sind-keine-verbrecher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gametwit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelisims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesisone-net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmovies2plus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihcp2e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karzylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krunker.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorensen.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohamadfirstpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myexasoltest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynoteforcash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzlalaresturaunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on6edrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedata.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otikon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawfect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwimmwindeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiewaren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuererklae5rung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telekomunikasi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelittleonmountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therobosft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonaudiogramm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unterwasserspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'what.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bauernkche-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frstisch-1za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hompatie-p4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--insolvenzverffenlichungen-9rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes47.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b2402d1d00000040300483046022100ab39314ad01c2707a921b4dd922e04f6b1bc2d7a59b74ef65845b0ef65510a52022100f775bb4ce64f1eda601ad1fa3ca08a3629c3a36a0d23bbf432b01e6ba16efee7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b2402d1ca00000403004730450220387889e6254866f2965076941e77a42151667562624d827449b74d3e4fe4f8a3022100e8e3b9d231cf93e27c0d96bd7c7b837de7a14b21a477488292c24c5037f0665f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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