twa.com.pl

Issued by R3

About this certificate

This digital certificate with serial number 04:a9:fb:1b:cf:60:39:61:9a:7a:5e:cf:fd:38:84:0f:2c:b3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=twa.com.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:fb:1b:cf:60:39:61:9a:7a:5e:cf:fd:38:84:0f:2c:b3
Serial Number (int): 406290644361719231434381979112136074276019
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:1e:8a:26:f8:a1:6f:a6:0e:69:41:82:ad:e0:07:83:be:90:e5:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:14:56:c0:dc:3c:9a:d6:c4:be:84:07:52:c8:c3:83:1f:df:ab:bb
Fingerprint (sha256): 1a:fc:7d:30:d6:5f:46:4c:ad:8f:49:b1:01:09:3d:e2:3a:ae:66:f2:ab:1b:38:5d:31:ee:80:dc:ff:0d:f2:8e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate twa.com.pl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twa.com.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.atesl.org
*.bettervida.co
*.card1.us
*.dachbedarf.de
*.deenic.de
*.eastmarketnoodlehouse.com
*.edgewood.au
*.ejeans.de
*.elvagondelsur.com
*.essentialpim.de
*.eztc.it
*.foodprocessor.de
*.gigis.bar
*.gild.au
*.hanmie.tv
*.haushaltsbedarf.de
*.heyhotflashes.net
*.iberikopetfood.com
*.jinrutai.com
*.jlgfitnessclub.com
*.mechanicalengineering.au
*.mitost.de
*.modellflugversicherung.de
*.norte.au
*.nugstv.net
*.parentsevenings.co.uk
*.payobeer.com
*.peacedonkeys.com
*.pumps-kaufen.de
*.rapp.au
*.renmark.com.au
*.renterversicherung.de
*.robertphiliptesttlddomainpurchase2.bio
*.santinhos.com.br
*.sexmatxa.net
*.snowboardinghalloffame.org
*.techubly.com
*.temaofisi.site
*.topicmarkets.com
*.transenporn.de
*.trendyrings.net
*.twa.com.pl
*.xn--billogflge-heb.de
*.xn--brswe-jua.de
*.xn--brutksten-z2a.de
*.xn--druckerztubehr-7pb.de
*.xport1.de
*.xxnx.nl
*.ytt.de
*.zyciebezograniczen.com
atesl.org
bettervida.co
card1.us
dachbedarf.de
deenic.de
eastmarketnoodlehouse.com
edgewood.au
ejeans.de
elvagondelsur.com
essentialpim.de
eztc.it
foodprocessor.de
gigis.bar
gild.au
hanmie.tv
haushaltsbedarf.de
heyhotflashes.net
iberikopetfood.com
jinrutai.com
jlgfitnessclub.com
mechanicalengineering.au
mitost.de
modellflugversicherung.de
norte.au
nugstv.net
parentsevenings.co.uk
payobeer.com
peacedonkeys.com
pumps-kaufen.de
rapp.au
renmark.com.au
renterversicherung.de
robertphiliptesttlddomainpurchase2.bio
santinhos.com.br
sexmatxa.net
snowboardinghalloffame.org
techubly.com
temaofisi.site
topicmarkets.com
transenporn.de
trendyrings.net
twa.com.pl
xn--billogflge-heb.de
xn--brswe-jua.de
xn--brutksten-z2a.de
xn--druckerztubehr-7pb.de
xport1.de
xxnx.nl
ytt.de
zyciebezograniczen.com

Other certificates including the domain name twa.com.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for twa.com.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406290644361719231434381979112136074276019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 08:56:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 08:56:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twa.com.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831904570917779418038679319844188881604013981749084694069060830264479742274940555936604268269011865341942581461951396842999669006699250837546398286467249024900712512454542558190081522693037043438179617988925431821692759158525078483035309859938700995270466680550408057398371940400601216901346087241178998347664581962331792087614399988661907304686796556173013381788871666554302807685698353873508217095347402405880495741157406747933919904237819840899490311959779444342543821760721243008066246432607548111473996980525126069269739455575047241287721379410985266655600454240902893257939165101991390053367623263189290292158827147787037379738172049274619148002652047177232944691527927608397068807719292542070671254367669191797445463068877894366386835522716146084333837036175372379946495916847515479803636173381244230301413229235229436377015460692655592501366267828972539335187776637251123640460156523901092366995639015014782484619916552682522725432766533297625979361313543514966838530826565309778403466173451178062200037653020971138923595590569420237674478169167848312869052518405016038198932800924372576015408761469976951860474055821176637570201113491543514593700827360032595145821239562167823652373993919069750104904790169000988631991290413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf1e8a26f8a16fa60e694182ade00783be90e533
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1786 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettervida.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.card1.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dachbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deenic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edgewood.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ejeans.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elvagondelsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essentialpim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eztc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigis.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gild.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmie.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haushaltsbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heyhotflashes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iberikopetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jinrutai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jlgfitnessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mechanicalengineering.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modellflugversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norte.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parentsevenings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payobeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peacedonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pumps-kaufen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renmark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renterversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robertphiliptesttlddomainpurchase2.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santinhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowboardinghalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temaofisi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topicmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transenporn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--billogflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brswe-jua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brutksten-z2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--druckerztubehr-7pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xport1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxnx.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ytt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zyciebezograniczen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettervida.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card1.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deenic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgewood.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejeans.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvagondelsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialpim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eztc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigis.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gild.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmie.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haushaltsbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyhotflashes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iberikopetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jinrutai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlgfitnessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicalengineering.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modellflugversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norte.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentsevenings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payobeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacedonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumps-kaufen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renmark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renterversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertphiliptesttlddomainpurchase2.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santinhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowboardinghalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temaofisi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topicmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transenporn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--billogflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brswe-jua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brutksten-z2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--druckerztubehr-7pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xport1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxnx.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyciebezograniczen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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