www.xn--berlebenmitklopapier-oec.de

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:26:0f:a2:c2:8e:41:4a:66:52:36:3a:7b:ef:aa:bd:1a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.xn--berlebenmitklopapier-oec.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:26:0f:a2:c2:8e:41:4a:66:52:36:3a:7b:ef:aa:bd:1a
Serial Number (int): 297457380538357567014827587258894466596122
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:dc:72:01:ea:37:96:6d:30:0c:e8:b3:17:2c:8e:f8:cb:87:06:a6
Fingerprint (sha256): 23:3d:dc:cd:dc:a3:aa:74:45:e9:c0:25:3a:6a:f5:6c:32:07:c3:11:bf:4e:30:2c:f4:4a:50:fc:05:6b:3f:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.xn--berlebenmitklopapier-oec.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xn--berlebenmitklopapier-oec.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.www.higashifukami-high.school
aftabfarooq.tech
aiegfeedback.online
an2logistics.online
api.azsco.com
app.always.fit
app.aroundy.me
app.expertcoders.online
app.rmherramientas.com.ar
app.wisemaintenance.pt
auth.fleato.com
auth.mercamio.com
auth.saucycollective.com
auth.transcribekit.com
auth1.rereceipt.cc
authrgseeddev.revyrie.co
bhushanjoshi.site
brettspill.xn--nrd-yla.no
calcula.girosv.com
caseoheist.modelclubbit.com
cdn.chatfully.io
codaptive.io
consultaira.tech
convert.routenote.com
demo-app.qonic.com
dev.adamshealthnetwork.org
eatswap.in
eldrly.ch
email.motorsmeet.fr
erika.clevelandmetroschools.org
europe.visenze.com
fidoo.me
gatekeeper.nickradford.dev
gspdua.com
hub.nimztek.com
jdsz.idappstudio.com
joum.com.co
link.offsuit.app
link.rituals.com
mahakoshalsetu.com
mdaqqa.com
meritcoin.qa.gcp.pitang.com
mesomission.fieldmuseum.org
mezbanresturant.com
motobook.org
nashvillesites.org
panarastudio.com
phillycarbonwatch.com
powerbridgepk.com
profipromo.pl
raqamshase.com
rektwife.xyz
reputation.optiscorer.com
s.emed.com
seketikaproject.com
sipcalculatorr.com
solarix.mx
status.leisureking.eu
vep.businessriver.tv
viverdefotovoltaico.com.br
weather.app.5ls.de
wish.kempf.dev
www.aiegfeedback.online
www.alienpunkmfers.com
www.bhushanjoshi.site
www.cursoreact.es
www.dave-becker.com
www.dorachan.com
www.elecbuytn.com
www.erika.clevelandmetroschools.org
www.francorivarola.tech
www.get-credit.link
www.ipsapl.com
www.joum.com.co
www.mahakoshalsetu.com
www.mapicon.jp
www.miranasolutions.com
www.nashvillesites.org
www.qriositynet.xyz
www.sahyogherbals.com
www.sailcourier.com
www.santoshrajkumar.com
www.tryecommysteryshoppers.com
www.webled.online
www.xn--bagedikli-12b.com
www.xn--berlebenmitklopapier-oec.de
www.xn--hlsapanderberg-5hbu.se
www.xn--perckenwerkstatt-lzb.de
xn----8sbb4ajr0aig.xn--p1acf
xn--bagedikli-12b.com
xn--bj4bl1ah1efdb23w62s46a.com
xn--btvakten-9za.no
xn--dengladehvel-3jb.no
xn--flerefaglrte-fdb.nu
xn--hjrntorget-r5a.se
xn--pernillashlsa-kfb.se
xn--smgodtappen-y8a.no
xn--tdk.xn--0dk.co
xn--zf0b5lj1onsvzjf.com
yustit.galaxyben.com

Other certificates including the domain name xn--berlebenmitklopapier-oec.de

(limited to 100 certificates)
xn--berlebenmitklopapier-oec.de
xn--trimtch-198d.ml
fchat2020.wpvi.ru
acc.dots-and-boxes.hjvv.nl
www.xn--berlebenmitklopapier-oec.de
get.wechselgott.com
www.xn--rd-yia.app
www.nextzoft.com
app.scorethebusiness.com
www.xn--berlebenmitklopapier-oec.de
www.ffftickets.com
app.scorethebusiness.com
chiin.org
acc.dots-and-boxes.hjvv.nl
booking.adamshealthnetwork.org
www.sageg17.com
ara.prismcode.tech
ara.prismcode.tech
bunkbread.com
www.ffftickets.com
regalo.xn--bolgrafospersonalizados-3ec.net
upesmtc.com
stu.fastai.dev
rtm.vnlp.ai
regalo.xn--bolgrafospersonalizados-3ec.net
www.mertcansevinc.com
xn--trimtch-198d.ml
rsbg.ch
rolls-skating.com
www.xn--rd-yia.app
www.dellwatson.com
www.trbull007.in
chiin.org
auth.desaintest.my.id
rtm.vnlp.ai
www.andrejus.uk

Certificate

The complete raw certificate details for www.xn--berlebenmitklopapier-oec.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297457380538357567014827587258894466596122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 06:28:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 06:28:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xn--berlebenmitklopapier-oec.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.www.higashifukami-high.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aftabfarooq.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiegfeedback.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'an2logistics.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.azsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.always.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aroundy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.expertcoders.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rmherramientas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.wisemaintenance.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.fleato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mercamio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.saucycollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.transcribekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth1.rereceipt.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authrgseeddev.revyrie.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhushanjoshi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brettspill.xn--nrd-yla.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcula.girosv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caseoheist.modelclubbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.chatfully.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codaptive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultaira.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convert.routenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-app.qonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.adamshealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatswap.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldrly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.motorsmeet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erika.clevelandmetroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.visenze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidoo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatekeeper.nickradford.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gspdua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.nimztek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdsz.idappstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joum.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.offsuit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahakoshalsetu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdaqqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritcoin.qa.gcp.pitang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesomission.fieldmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mezbanresturant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motobook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashvillesites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panarastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillycarbonwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbridgepk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profipromo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raqamshase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rektwife.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reputation.optiscorer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.emed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seketikaproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipcalculatorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarix.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.leisureking.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vep.businessriver.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viverdefotovoltaico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.app.5ls.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wish.kempf.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiegfeedback.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alienpunkmfers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhushanjoshi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cursoreact.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dave-becker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dorachan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elecbuytn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erika.clevelandmetroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francorivarola.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.get-credit.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipsapl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joum.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahakoshalsetu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapicon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miranasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nashvillesites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qriositynet.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahyogherbals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santoshrajkumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tryecommysteryshoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webled.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bagedikli-12b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--berlebenmitklopapier-oec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--hlsapanderberg-5hbu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--perckenwerkstatt-lzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----8sbb4ajr0aig.xn--p1acf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bagedikli-12b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bj4bl1ah1efdb23w62s46a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--btvakten-9za.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dengladehvel-3jb.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flerefaglrte-fdb.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hjrntorget-r5a.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pernillashlsa-kfb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--smgodtappen-y8a.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tdk.xn--0dk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zf0b5lj1onsvzjf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yustit.galaxyben.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac616be110000040300473045022100a8e0683d29d7da63846761e0bb1a01270314652ab4ea39811db1408dc4e9763e02202cedd3f09f605776200ffc46e938387c90a942f3df2d6ca7dd2804f3c992477c007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ac616bffe0000040300483046022100a86ec08074853b2de804aa5866a94a29fd5764facc4f888ccd4241dbf49b55f10221009a0a0e1bd6399b1218693cdb37a95ce6b0e9cf2a6faf2951271cf66021692263
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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