finanzamt-berlin.de

Issued by R3

About this certificate

This digital certificate with serial number 04:40:8a:3f:28:1e:19:a3:18:eb:76:b7:32:51:58:2d:40:a4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=finanzamt-berlin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:8a:3f:28:1e:19:a3:18:eb:76:b7:32:51:58:2d:40:a4
Serial Number (int): 370410976601782617652082108385856605470884
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e4:a7:94:e6:d8:21:b5:ee:00:d2:d3:4c:43:a7:d4:6c:07:bf:ff:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:9f:76:06:3a:2f:64:63:bb:b9:6c:2c:56:bd:44:50:9c:92:27:1c
Fingerprint (sha256): 12:5f:f0:bb:15:20:81:8a:d0:70:9b:10:c0:55:5e:fc:73:5e:6e:90:f7:25:bb:4e:be:c2:c5:b7:f2:69:c7:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate finanzamt-berlin.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for finanzamt-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.africansgreyparrot.com
*.ameriplas.org
*.applyforloan.com.au
*.besichtigung.de
*.brownseedsales.com
*.btinterernet.com
*.carinsuranceproviders.com.au
*.dehnungsstab.de
*.diffuse.in
*.dimmschalter.de
*.ekanab.me
*.eternitynaturaltherapy.com
*.etimesheets.org
*.finanzamt-berlin.de
*.gesundschop24.de
*.haminationsmerch.com
*.haustiere-verzeichnis.de
*.igm.eu
*.ihave50dollars.com
*.justparcel.net
*.klammerpflaster.de
*.kommunikationswirtin.de
*.kraftband.de
*.login-db.com
*.maritaliuliatarot.com
*.minivan.de
*.minor.au
*.mychartmah.org
*.mytv-mount.com
*.peliseries.cc
*.pendantlights.de
*.picassoinseattle.org
*.pornofilim.de
*.radarfall.de
*.raul.com.au
*.sandiego4dating.info
*.spulwurm.de
*.stratussiliconvalley.com
*.sufentanil.de
*.tagesscghau.de
*.taizee.de
*.unfallreporter.de
*.visitorsgates.com
*.walidbelfatmi.live
*.wdrr.de
*.xn--bootsanhnger-ncb.de
*.xn--brsenzulassung-vpb.de
*.xn--gehirnentzndung-8vb.de
*.xn--hngestuhlgestell-vnb.de
*.yeyecao.xyz
africansgreyparrot.com
ameriplas.org
applyforloan.com.au
besichtigung.de
brownseedsales.com
btinterernet.com
carinsuranceproviders.com.au
dehnungsstab.de
diffuse.in
dimmschalter.de
ekanab.me
eternitynaturaltherapy.com
etimesheets.org
finanzamt-berlin.de
gesundschop24.de
haminationsmerch.com
haustiere-verzeichnis.de
igm.eu
ihave50dollars.com
justparcel.net
klammerpflaster.de
kommunikationswirtin.de
kraftband.de
login-db.com
maritaliuliatarot.com
minivan.de
minor.au
mychartmah.org
mytv-mount.com
peliseries.cc
pendantlights.de
picassoinseattle.org
pornofilim.de
radarfall.de
raul.com.au
sandiego4dating.info
spulwurm.de
stratussiliconvalley.com
sufentanil.de
tagesscghau.de
taizee.de
unfallreporter.de
visitorsgates.com
walidbelfatmi.live
wdrr.de
xn--bootsanhnger-ncb.de
xn--brsenzulassung-vpb.de
xn--gehirnentzndung-8vb.de
xn--hngestuhlgestell-vnb.de
yeyecao.xyz

Other certificates including the domain name finanzamt-berlin.de

(limited to 100 certificates)
finanzamt-berlin.de
anthropologist.com.au
saunaclub.be
sling.to
azendi.co.uk
compressor.co.za
finanzamt-berlin.de
finanzamt-berlin.de
compressor.co.za
klammerpflaster.de
finanzamt-berlin.de
compressor.co.za
finanzamt-berlin.de
finanzamt-berlin.de

Certificate

The complete raw certificate details for finanzamt-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370410976601782617652082108385856605470884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 21:20:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 21:20:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'finanzamt-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698968453667262530267100924854640720506498624657395385990280608624271190331099182229116459931267355373053474649092971906686696579553660256995398887432046833165290520205135769723380249599681178937217718876887368711674295739058502823804472333256999620245760093452134030228809479214751381988762944806569150172710772785146247700013271916177494260751590073486630103901282028244594283466584997090283168170246280598066962107455478639863629740218457093427529056192634694671305019084810098857225920137653092889761005837207272530579769032014254518959655286772445143110755872846691158306833747414861838622358628775572699127083576915751510453138901717538484697857162702570621874508040824912038934278985905712005198785980147534674295309881223843128752911904962558907676433037664853044329495817310462678219714965284657333204838534272838841974681432089809312804913600479074845386993330339211155340396051665145990864026667253824440394810382493761578301131825078593884499130214299589856363603860378785160728781967635596111699124698814360251307367085710073974311958069062067299130245621887875200857102464830755125775954009451861364758821290054502483571949877040878495624212268918184049325159945406762713242042790378830089908791799922105326391534003437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4a794e6d821b5ee00d2d34c43a7d46c07bfff01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1938 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africansgreyparrot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ameriplas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applyforloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besichtigung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brownseedsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btinterernet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carinsuranceproviders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dehnungsstab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diffuse.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dimmschalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekanab.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eternitynaturaltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etimesheets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finanzamt-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundschop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haminationsmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haustiere-verzeichnis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igm.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihave50dollars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justparcel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klammerpflaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kommunikationswirtin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraftband.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.login-db.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maritaliuliatarot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minivan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mychartmah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytv-mount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peliseries.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pendantlights.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picassoinseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornofilim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radarfall.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raul.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandiego4dating.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spulwurm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stratussiliconvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sufentanil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagesscghau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taizee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unfallreporter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitorsgates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walidbelfatmi.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wdrr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bootsanhnger-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brsenzulassung-vpb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gehirnentzndung-8vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hngestuhlgestell-vnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeyecao.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africansgreyparrot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameriplas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applyforloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besichtigung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownseedsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btinterernet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carinsuranceproviders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dehnungsstab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diffuse.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimmschalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekanab.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eternitynaturaltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etimesheets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finanzamt-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundschop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haminationsmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haustiere-verzeichnis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igm.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihave50dollars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justparcel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klammerpflaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kommunikationswirtin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraftband.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-db.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritaliuliatarot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minivan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychartmah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytv-mount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peliseries.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pendantlights.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picassoinseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornofilim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radarfall.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raul.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiego4dating.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spulwurm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stratussiliconvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sufentanil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesscghau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taizee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfallreporter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitorsgates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walidbelfatmi.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdrr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bootsanhnger-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brsenzulassung-vpb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gehirnentzndung-8vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hngestuhlgestell-vnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeyecao.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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