basketballsinglets.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:ce:da:50:62:b4:22:61:cf:8d:41:d8:9e:ef:d3:98:2f was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=basketballsinglets.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6a:ce:da:50:62:b4:22:61:cf:8d:41:d8:9e:ef:d3:98:2f
Serial Number (int): 297681743207159947414906062324116185389103
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:b0:44:cc:6e:e6:22:bd:7e:50:e8:3d:6e:f0:93:33:a8:7d:a8:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:35:77:e4:76:94:3b:cb:60:0f:f6:19:96:f0:25:bf:13:3c:d0:05
Fingerprint (sha256): 18:e0:2e:e2:5a:65:38:a4:11:ef:d2:82:47:4b:64:c7:88:5a:20:9d:40:4a:01:ce:10:ae:60:ec:b8:2e:b1:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate basketballsinglets.com.au

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for basketballsinglets.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adultschoolguhsd.net
*.alexios-bds.com
*.applooker.com
*.aquario.eu
*.autuversicherung.de
*.azzurroflypark.it
*.basketballsinglets.com.au
*.bestsuper.com.au
*.bgfw.net
*.bms1.com.au
*.bpooking.de
*.chatromms.de
*.dekopistolen.de
*.fahrplanauskumft.de
*.frankturt.de
*.godbet.online
*.holzbrikets.de
*.imperialfashion-ua.com
*.improbabiliallestero.com
*.indexdogs.com
*.karunahospital.com
*.larkmaps.pl
*.metallfeder.de
*.obcw.com.au
*.papillonzucht.de
*.posadafueguina.com
*.qualification.com.au
*.raderfalle.de
*.reclamacionesdetelecomunicaciones.com
*.retenversicherung.de
*.rotarydiagnostics.com
*.sanktmaergen.de
*.santander-bnk.de
*.schnaeppchen-kostenlos.de
*.slpiegel.de
*.spargelzubereitung.de
*.sracka.cz
*.steckbriefe.net
*.stromstossschalter.de
*.temporaryjob.com.au
*.topnotch-restoration.com
*.tufano.eu
*.ulup.pl
*.vomiting.com.au
*.xn--fanbettwsche-ncb.de
*.xn--lttozahlen-ecb.de
*.xn--marzipanpltzchen-4nb.de
*.xn--nhstoffe-0za.de
*.yw3225.com
adultschoolguhsd.net
alexios-bds.com
applooker.com
aquario.eu
autuversicherung.de
azzurroflypark.it
basketballsinglets.com.au
bestsuper.com.au
bgfw.net
bms1.com.au
bpooking.de
chatromms.de
dekopistolen.de
fahrplanauskumft.de
frankturt.de
godbet.online
holzbrikets.de
imperialfashion-ua.com
improbabiliallestero.com
indexdogs.com
karunahospital.com
larkmaps.pl
metallfeder.de
obcw.com.au
papillonzucht.de
posadafueguina.com
qualification.com.au
raderfalle.de
reclamacionesdetelecomunicaciones.com
retenversicherung.de
rotarydiagnostics.com
sanktmaergen.de
santander-bnk.de
schnaeppchen-kostenlos.de
slpiegel.de
spargelzubereitung.de
sracka.cz
steckbriefe.net
stromstossschalter.de
temporaryjob.com.au
topnotch-restoration.com
tufano.eu
ulup.pl
vomiting.com.au
xn--fanbettwsche-ncb.de
xn--lttozahlen-ecb.de
xn--marzipanpltzchen-4nb.de
xn--nhstoffe-0za.de
yw3225.com

Other certificates including the domain name basketballsinglets.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for basketballsinglets.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297681743207159947414906062324116185389103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 08:20:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 08:20:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'basketballsinglets.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865646209307789194778530097385693452770943409070147063171378983886762950394119549531347034497359105611494583375522427369018068006016054603862566177767236195603028050264374695289644442940577791544409505147463414392027474146070002861641605916816688177122358297273457237501767540503233044479543897585400703380521034190848490423975626943432571834269559452398902752858383407102071809975882343347812229099419665795620078515367662358454849721648947551751361259482696916522574856728483985180817353297604660295980226478652053865365971433302331688744251478692315789288989207020353291639653380213157644363424782129455878147266901736637730786877600529125736929501945045758507606385732082804834231807123179136215773228410302600595440607796406015549599433938842490129357454618947775241028791493636041933836017880632693888480935978991633644327291551617500308614363762305308410190518842037119422915191220922421742866300302333229613492391545915223221029066487291346410119149196272001012050678879070701200161772640644364175245158535083231430518448013956075337095710458534757766523277282560500874694977497978197083257940593480918596381610911804910118660025366940491136696613308464541848589451980190297035067164426725135561886535897314394929452790851593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58b044cc6ee622bd7e50e83d6ef09333a87da858
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1928 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultschoolguhsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexios-bds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquario.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autuversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azzurroflypark.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basketballsinglets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsuper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bgfw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bms1.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bpooking.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatromms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekopistolen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fahrplanauskumft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankturt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godbet.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holzbrikets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperialfashion-ua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.improbabiliallestero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indexdogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karunahospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larkmaps.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metallfeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obcw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papillonzucht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.posadafueguina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualification.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raderfalle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reclamacionesdetelecomunicaciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotarydiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanktmaergen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander-bnk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schnaeppchen-kostenlos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slpiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spargelzubereitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sracka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steckbriefe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromstossschalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temporaryjob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topnotch-restoration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tufano.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulup.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vomiting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fanbettwsche-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lttozahlen-ecb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--marzipanpltzchen-4nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nhstoffe-0za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yw3225.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultschoolguhsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexios-bds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquario.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autuversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azzurroflypark.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballsinglets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsuper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgfw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms1.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpooking.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatromms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekopistolen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahrplanauskumft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankturt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godbet.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holzbrikets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperialfashion-ua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'improbabiliallestero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indexdogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karunahospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larkmaps.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metallfeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obcw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papillonzucht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posadafueguina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualification.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raderfalle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reclamacionesdetelecomunicaciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotarydiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanktmaergen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander-bnk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schnaeppchen-kostenlos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slpiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spargelzubereitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sracka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steckbriefe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromstossschalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaryjob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topnotch-restoration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tufano.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulup.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vomiting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fanbettwsche-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lttozahlen-ecb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--marzipanpltzchen-4nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nhstoffe-0za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yw3225.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f61ce362b0000040300483046022100da7a6fdfa3f7687089edef3f47b99de24825dfe7687957cc857a9260e70fa9da0221008e395a34aa934873d8c617cfbecf0267c7cd3edf588cfdd78f0aac8dc3e92e7f007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f61ce36310000040300483046022100d65840e3ef43a2699e39cde625e15168318177900cfbcf43e6d59e6677a3b556022100cfa11c855ca2f1dcb29909201e0ef6f32669971484a17859f1dd8f67ed419801
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00544afb9cd9e377280cd0e9fba13fcc67c143cd0e4da4c9306654bb6cc1b10b7e3ec6291df848df7a6db8efeb26ccada0f01798436737f0943af31c6ae45c013e3e6bbf01a386088143f3f8c8c61b6d66df20963617243291da1a86b9d0b2429083994d9dafe31acc2eea129c1d2b9c88f7892b04254a6450750b2191b7820b0a9007051782655313fdccb3455522fbd45516ca050d42a15d96c1db23eee39c707a63011fc3deb2eefcdfab9949902d5282a90f1e5b9cb2c7a809b7250366739b416b1fb2d573ecd8cf4a8a28104411fc47380e6dde778893edb1a6f3f4a065524bd237e82fa75e458f131ae8077f5ad2c04b04e5b3453c972d1ac122496422d5