dmprintshop.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d2:82:1f:a2:4d:46:6e:ae:d8:7b:2f:d5:b9:75:4d:f9:6b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dmprintshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d2:82:1f:a2:4d:46:6e:ae:d8:7b:2f:d5:b9:75:4d:f9:6b
Serial Number (int): 420081404672965439620320000659824782997867
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8a:f7:bf:54:7e:f4:2b:78:b0:da:f7:0a:a5:75:c8:f7:26:76:9c:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c3:5c:c9:b9:3b:80:8e:b8:77:0c:00:6d:81:4f:73:9d:ba:6d:e6:a6
Fingerprint (sha256): 28:bc:cf:0a:f8:0d:11:33:b2:82:e4:97:af:2f:1c:33:e5:62:f6:2c:1a:54:07:2c:0f:62:43:73:bf:02:57:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dmprintshop.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dmprintshop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aclidiniumbromid.de
*.anniversarygift.com.au
*.apocynum.de
*.beamstokyo.com
*.bevfly.us
*.bigbrotheralbania.live
*.bronchiis.de
*.businessequipment.com.au
*.conium-maculatum.de
*.coppd.de
*.depsychotherapie.de
*.diets.com.au
*.dmprintshop.com
*.endomettriose.de
*.expressloan.co.za
*.facturacion-vta.com.mx
*.gosteopathie.de
*.hacres.co
*.handyvertrege.de
*.koreanclassmassive.com
*.mega-burger-dner.de
*.morphea.de
*.nametheoctobersurprise.com
*.nesselsuchtf.de
*.nowhereshirt.com
*.politico.com.au
*.pubertas-tarda.de
*.retinopathia-centralis-serosa.de
*.rheuma-de.de
*.ryanaihr.de
*.scheidenpilza.de
*.scheidenplz.de
*.simfibnity.de
*.spreekuur.be
*.steuererklaedung.de
*.steuererklaerjng.de
*.steuererklaetrung.de
*.steuerwrklaerung.de
*.tversicherung.de
*.vorhautentzuendung.de
*.vorofflimmern.de
*.wanderdelusion.cn
*.wild-oat.de
*.xn--brogrosshandel-gsb.de
*.xn--containertransportflge-cmc.de
*.xn--heilkrutwr-v5a.de
*.xn--heolkruter-v5a.de
*.xn--industriebodenbelge-wwb.de
*.xn--mietsvertrge-pcb.de
*.xn--pfndungsfreibetrag-mtb.de
aclidiniumbromid.de
anniversarygift.com.au
apocynum.de
beamstokyo.com
bevfly.us
bigbrotheralbania.live
bronchiis.de
businessequipment.com.au
conium-maculatum.de
coppd.de
depsychotherapie.de
diets.com.au
dmprintshop.com
endomettriose.de
expressloan.co.za
facturacion-vta.com.mx
gosteopathie.de
hacres.co
handyvertrege.de
koreanclassmassive.com
mega-burger-dner.de
morphea.de
nametheoctobersurprise.com
nesselsuchtf.de
nowhereshirt.com
politico.com.au
pubertas-tarda.de
retinopathia-centralis-serosa.de
rheuma-de.de
ryanaihr.de
scheidenpilza.de
scheidenplz.de
simfibnity.de
spreekuur.be
steuererklaedung.de
steuererklaerjng.de
steuererklaetrung.de
steuerwrklaerung.de
tversicherung.de
vorhautentzuendung.de
vorofflimmern.de
wanderdelusion.cn
wild-oat.de
xn--brogrosshandel-gsb.de
xn--containertransportflge-cmc.de
xn--heilkrutwr-v5a.de
xn--heolkruter-v5a.de
xn--industriebodenbelge-wwb.de
xn--mietsvertrge-pcb.de
xn--pfndungsfreibetrag-mtb.de

Other certificates including the domain name dmprintshop.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for dmprintshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420081404672965439620320000659824782997867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 20:34:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 20:34:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmprintshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787332965273707896688540303108251145737242078269687605628569233362777516321228027666104859044527179827387973852391369004765996729862916009107241867841296845979011674222341043083784721047710108203785836609272407398687868376035826409675227005013920205750345624468215190776314875294605026799655508259596747309701900407071815386081187965029376754354068085757594059584730737538483062247735490890871472486636342987021033530395054349333984515610947691600395729888834345186329820437244404209550859554947717689239894056389957615479755286030486781226443683451441914407610881137786703934833204810585284872374111122204808808169198114871663079316100724420063595775757711471578651625963270007321366601200751731751761100795878342697044038369511090905558233659189085089012455721474885499378466857774815961607409005257189537488128026998584870034791082629232856497027028081612693376464983892200650157847454295350159944897970537270698004706973797406393009150948527733911428284623251618018095821209295276818524517191727493558182514646303603574179957784774173661899350201868207404685420688360386306973479713017061921822118540851616266802662598310958432080874240628107906357886365913646406086780451856501536173876076759809946268054194372544597302063763219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8af7bf547ef42b78b0daf70aa575c8f726769c1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2086 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aclidiniumbromid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anniversarygift.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apocynum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beamstokyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bevfly.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigbrotheralbania.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bronchiis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessequipment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conium-maculatum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coppd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depsychotherapie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmprintshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endomettriose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressloan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facturacion-vta.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gosteopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hacres.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handyvertrege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koreanclassmassive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mega-burger-dner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morphea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nametheoctobersurprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nesselsuchtf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowhereshirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.politico.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pubertas-tarda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retinopathia-centralis-serosa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rheuma-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryanaihr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheidenpilza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheidenplz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simfibnity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spreekuur.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuererklaedung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuererklaerjng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuererklaetrung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuerwrklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vorhautentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vorofflimmern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wanderdelusion.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wild-oat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brogrosshandel-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--containertransportflge-cmc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--heilkrutwr-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--heolkruter-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--industriebodenbelge-wwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mietsvertrge-pcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pfndungsfreibetrag-mtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclidiniumbromid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversarygift.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apocynum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beamstokyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bevfly.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbrotheralbania.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronchiis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessequipment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conium-maculatum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depsychotherapie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmprintshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endomettriose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressloan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facturacion-vta.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosteopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hacres.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyvertrege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreanclassmassive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mega-burger-dner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morphea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nametheoctobersurprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesselsuchtf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowhereshirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politico.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubertas-tarda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retinopathia-centralis-serosa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheuma-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanaihr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheidenpilza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheidenplz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simfibnity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreekuur.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuererklaedung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuererklaerjng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuererklaetrung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuerwrklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorhautentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorofflimmern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanderdelusion.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wild-oat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brogrosshandel-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--containertransportflge-cmc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--heilkrutwr-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--heolkruter-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--industriebodenbelge-wwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mietsvertrge-pcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pfndungsfreibetrag-mtb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfa72ea37000004030047304502210093fee76550483c9a19c733fea20f44271736c7dea083fc24deab273fbb08d802022052ca3143660d7f72c93d88c033eed1f3102c6f5e9d335fd1ebd30056589a3fa000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cfa72ea9a000004030046304402201dacb2d73efd0785299622002d0375d6a27ad2f458d39a51a234b8d22fcb8b6e022014c5f2bbe287cc0e91f9037540a5b9188d4af2d06fa13410617f8f2539a1bc2b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00894976955d37a5795c13a8e6935fe24891f1a54a56d2277de405206bf63aa2de600bd003d2c5a86654b7daf6b725ed3e516b325e85101cdc9bbe14d2ad49ccdf2f6aba0a1c3771873f9661bb185d3e99a8ac2a2cd772c32b62026f0e38f7b0d6ca716c34ba3c2fa7ef04f591f5d9d2602d90da4806094c0e271aafb2a9c98903c9e8d95392ed22d837db58d7894b27033cafcebe5b8ef47935f3498be288d4f523b73d05736388f9255be7630a14d843b8e8e031b0b75234e74f5ed898e3462988c6f61891c68d19ab84a7c69d103b7d4c8ec4a567109d669033822ff2a746a9a3e8cf4cf001d7ebbe21a4114890b7870d9c40fdbbf2ae72b36f2d29c459a8bf