astrotours.co

Issued by R3

About this certificate

This digital certificate with serial number 04:c9:63:16:2b:f7:1f:14:c0:14:87:bd:3d:13:1d:29:d7:6a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=astrotours.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c9:63:16:2b:f7:1f:14:c0:14:87:bd:3d:13:1d:29:d7:6a
Serial Number (int): 416977608171985800399198252912418272958314
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:d7:17:1d:60:bb:c3:02:e5:2f:bf:db:66:83:16:42:40:ee:e5:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:e8:f9:38:58:fc:e0:c1:26:b0:b0:8c:48:47:ec:a9:73:f0:b4:44
Fingerprint (sha256): 0e:5c:b4:ad:6b:85:f7:b5:81:d8:ed:d8:68:1d:a1:c8:e5:74:a4:d5:64:95:4b:f1:7e:ad:7f:92:52:cb:62:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate astrotours.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for astrotours.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.10engradados.de
*.aboveallhairstudio.com
*.afrikasafariurlaib.de
*.astats.co
*.astrotours.co
*.badlo.com
*.centerinnbarcelona.com
*.crypyopia.co
*.developu.me
*.escodex.co
*.footrelax.info
*.ftimes.co
*.ganref.co
*.gdedu.co
*.gpfans.co
*.grossarl.info
*.gwccnet.cm
*.hiveos.co
*.hotel-bad-duerrenberg.de
*.icotto.co
*.kintor.co
*.kolektomani.com
*.leuchtendirect.de
*.linkedit.co
*.lorca-care.de
*.lotti-ug.de
*.munsch-partner.de
*.nasenbuch.de
*.nopy.co
*.okvfpujtin.com
*.phimgi.co
*.pogomoves.com
*.pop-upusa.com
*.precisamos.de
*.rapgurus.com
*.rapsounds.de
*.raychat.co
*.rechtsanwaltschweigert.de
*.schluter-maak.de
*.siubasin.com
*.sscmpr.co
*.sullivanscottages.com
*.sunkissedorganics.de
*.thevoicerecording.com
*.tuspo-bagmuender.de
*.tvfantic.com
*.urareplay.com
*.usbeam.co
*.xenanghavico.com
*.xn--zur-ratsmhle-llb.de
10engradados.de
aboveallhairstudio.com
afrikasafariurlaib.de
astats.co
astrotours.co
badlo.com
centerinnbarcelona.com
crypyopia.co
developu.me
escodex.co
footrelax.info
ftimes.co
ganref.co
gdedu.co
gpfans.co
grossarl.info
gwccnet.cm
hiveos.co
hotel-bad-duerrenberg.de
icotto.co
kintor.co
kolektomani.com
leuchtendirect.de
linkedit.co
lorca-care.de
lotti-ug.de
munsch-partner.de
nasenbuch.de
nopy.co
okvfpujtin.com
phimgi.co
pogomoves.com
pop-upusa.com
precisamos.de
rapgurus.com
rapsounds.de
raychat.co
rechtsanwaltschweigert.de
schluter-maak.de
siubasin.com
sscmpr.co
sullivanscottages.com
sunkissedorganics.de
thevoicerecording.com
tuspo-bagmuender.de
tvfantic.com
urareplay.com
usbeam.co
xenanghavico.com
xn--zur-ratsmhle-llb.de

Other certificates including the domain name astrotours.co

(limited to 100 certificates)
astrotours.co
astrotours.co
www.astrotours.co
astrotours.co
www.astrotours.co
astrotours.co
astrotours.co
astrotours.co
www.astrotours.co
astrotours.co
www.astrotours.co
astrotours.co
www.astrotours.co
astrotours.co
astrotours.co
www.astrotours.co
www.astrotours.co
astrotours.co
astrotours.co
astrotours.co
www.astrotours.co
www.astrotours.co
www.astrotours.co
www.astrotours.co
www.astrotours.co
www.astrotours.co
astrotours.co
astrotours.co
www.astrotours.co
astrotours.co
astrotours.co
www.astrotours.co
astrotours.co
astrotours.co
passthru.com
www.astrotours.co
www.astrotours.co
astrotours.co
astrotours.co
astrotours.co
astrotours.co
astrotours.co
www.astrotours.co
astrotours.co

Certificate

The complete raw certificate details for astrotours.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416977608171985800399198252912418272958314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 22:06:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 22:06:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'astrotours.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803250051738536088237108881990222619038351383297358026397992455072637254049825091901321646362211459631974902052285206929693422611440259074925270629615353921478758740256649274568245332957097332279578085447277348865351476753599718582126215726454484950844905909913275560103240222067705276733012605356703538691965794109289294198734325315513195494856379401156163507063572655575692838130422409637138365789081406495740362966918562133862570205280642404893867135475424094311799421894739591269316231425036345554809615294997957024191369782861033189121260717690261620460735197249878940400981859793653334185661833105696378683234989777434399754912323165703484667799345915104014669726473837079880389993260528566505429622088309210583039271481605490590070105807450321655564492406873805758097323966406878833438454001606962552185277032982059162105468748495708685777462960945813494488932516677391683966968557743375530392271186725884738449662505548546592708838373403524442434793802604275718039774928190976021569390974566101046971127594856324959884578717544062568781719080150960978708253413170534752573492876627302337691663180365292786911136108891715604892094159693085160731697185482266813261281571867434492457083217357772157675118388369147313177201162817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70d7171d60bbc302e52fbfdb6683164240eee5ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1668 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10engradados.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboveallhairstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrikasafariurlaib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astats.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrotours.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerinnbarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crypyopia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escodex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footrelax.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftimes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ganref.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gdedu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpfans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grossarl.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwccnet.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiveos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotel-bad-duerrenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icotto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kintor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolektomani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leuchtendirect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkedit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorca-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotti-ug.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.munsch-partner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nasenbuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nopy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okvfpujtin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phimgi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogomoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pop-upusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precisamos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapsounds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raychat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rechtsanwaltschweigert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schluter-maak.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siubasin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sscmpr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sullivanscottages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunkissedorganics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thevoicerecording.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuspo-bagmuender.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvfantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urareplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usbeam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xenanghavico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--zur-ratsmhle-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10engradados.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboveallhairstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrikasafariurlaib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astats.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrotours.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerinnbarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crypyopia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escodex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footrelax.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftimes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganref.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdedu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpfans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grossarl.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwccnet.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiveos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-bad-duerrenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icotto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kintor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolektomani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leuchtendirect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkedit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorca-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotti-ug.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munsch-partner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasenbuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nopy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okvfpujtin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimgi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pogomoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop-upusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisamos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapsounds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raychat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rechtsanwaltschweigert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schluter-maak.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siubasin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmpr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sullivanscottages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunkissedorganics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevoicerecording.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuspo-bagmuender.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvfantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urareplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usbeam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenanghavico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zur-ratsmhle-llb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f795bdda90000040300463044022020c12507cfa08a74f9c32e2bf9148289b1da4b350ec7fccfbb50a8f8ddf28b4802203d7fbbd97db835a45f1eb118c76eb4ef6ff4468345c57d26461a28db8d55319c0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f795be5890000040300463044022018cbc62b98dc084425300c34c85acefeada115f1532ac39b3aa6b7d77ba0114802201526385829f48127af4b6db4d4223d479271de59675cee092b6b5e8e2332595b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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