xn--mangabcher-feb.de

Issued by R3

About this certificate

This digital certificate with serial number 03:b7:ee:01:67:cf:a5:86:b7:66:8f:57:1d:fc:36:4c:ee:e2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xn--mangabcher-feb.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:ee:01:67:cf:a5:86:b7:66:8f:57:1d:fc:36:4c:ee:e2
Serial Number (int): 323924894502645793971588071141437025873634
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:8f:0e:07:16:60:77:f8:e2:31:18:f3:06:a8:43:a8:cf:8b:4b:cc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:ef:80:e6:c1:04:cd:f9:40:a1:40:3d:e4:36:bb:48:ab:ce:ae:7f
Fingerprint (sha256): 2b:a5:11:59:55:68:21:95:40:15:4b:a3:42:d3:bb:b0:f0:15:dd:b4:52:43:e1:18:ca:0f:be:b3:43:01:1a:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xn--mangabcher-feb.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--mangabcher-feb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agivforni.it
*.apc-resistenz.de
*.avv.com.au
*.aztub.me
*.bmw888.me
*.cafissiomo.de
*.cartidgediscount.co.uk
*.comdevini.org
*.dontly.me
*.energiediensten.be
*.fastsex.me
*.galaxyiptv.me
*.gewerblicheversicherung.de
*.healthybaby.com.au
*.hittworkout.net
*.hochbauamt.de
*.ingostadt.de
*.ingwerlikoer.de
*.ini.asia
*.kinderboxen.de
*.kwk.be
*.ladyluckrulesok.co.uk
*.lasvegassun.net
*.meteorologist.com.au
*.mydomain.au
*.pphysiotherapie.de
*.psycose.de
*.recuperaunamorperdido.co
*.redfis.co
*.redioimagenes.co
*.redlighttherapymachines.co
*.rooky.pro
*.szh.be
*.tijd.nl
*.utazzithon.hu
*.vodagfone.de
*.warns.net
*.watchasian.me
*.wepauto.de
*.wheelbearings.com.au
*.wiesenschaumkraut.de
*.wwwcontinental.de
*.wwwelpajote.com
*.xn--kaliumdnger-zhb.de
*.xn--lackschrze-geb.de
*.xn--mangabcher-feb.de
*.xn--rennmauskfig-ocb.de
*.zeks.me
*.zirich.de
*.zolleralbkreis.de
agivforni.it
apc-resistenz.de
avv.com.au
aztub.me
bmw888.me
cafissiomo.de
cartidgediscount.co.uk
comdevini.org
dontly.me
energiediensten.be
fastsex.me
galaxyiptv.me
gewerblicheversicherung.de
healthybaby.com.au
hittworkout.net
hochbauamt.de
ingostadt.de
ingwerlikoer.de
ini.asia
kinderboxen.de
kwk.be
ladyluckrulesok.co.uk
lasvegassun.net
meteorologist.com.au
mydomain.au
pphysiotherapie.de
psycose.de
recuperaunamorperdido.co
redfis.co
redioimagenes.co
redlighttherapymachines.co
rooky.pro
szh.be
tijd.nl
utazzithon.hu
vodagfone.de
warns.net
watchasian.me
wepauto.de
wheelbearings.com.au
wiesenschaumkraut.de
wwwcontinental.de
wwwelpajote.com
xn--kaliumdnger-zhb.de
xn--lackschrze-geb.de
xn--mangabcher-feb.de
xn--rennmauskfig-ocb.de
zeks.me
zirich.de
zolleralbkreis.de

Other certificates including the domain name xn--mangabcher-feb.de

(limited to 100 certificates)
grampianglassandglazingcompany.co.uk
gut.com.au
xn--mangabcher-feb.de
xn--mangabcher-feb.de
cleansers.com.au
pod.nl
concealer.com.au
pod.nl
xn--mangabcher-feb.de
weddingplans.com.au
xn--mangabcher-feb.de

Certificate

The complete raw certificate details for xn--mangabcher-feb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323924894502645793971588071141437025873634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 09:46:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 09:46:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--mangabcher-feb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794689909178410893569340657613008881612391493480578772894615351916432567892481962878109728321751489761947161453046737954883985339090842179350272960841270824984257551422647556134592202833392745941776381764600982222989293626141047192711436328533554986669813609690825831032733431829547298244926169220003011305795087801587103816853553491135107830401515186605088947457668989762242689093633410764379758171220873309438897794607522617953382090931882717316559625356608397880559161417013215249384584965830583532444019655326413622649185492979403301870117154600981823649012498559073551130239548866651687707356891809530701971214271657755094731993263004265218950430868965411300056288094073494801388688644078354238061320726695481095203707685562409829384409313016486790178240558451765193962080423138296450271348739550718089813693513469101818750002032522051103295508684220313101373327061497285179247365206248366604832479629538633537063545797252264513666573274986153348978099946554328720676987878327493292898108241116719676725408579261321033830101562422380390657537481439381637732227968911281032699160117547939527431470287095926778051785085531493977609429683282903821698866313742559136743296570862094678135932124755674877382728675218964581020593974471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e38f0e07166077f8e23118f306a843a8cf8b4bcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agivforni.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apc-resistenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aztub.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmw888.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafissiomo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartidgediscount.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comdevini.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dontly.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.energiediensten.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastsex.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galaxyiptv.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gewerblicheversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthybaby.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hittworkout.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hochbauamt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingostadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingwerlikoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ini.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinderboxen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwk.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladyluckrulesok.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasvegassun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meteorologist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydomain.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pphysiotherapie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psycose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recuperaunamorperdido.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redfis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redioimagenes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redlighttherapymachines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rooky.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.szh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tijd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utazzithon.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vodagfone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchasian.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wepauto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheelbearings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiesenschaumkraut.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcontinental.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwelpajote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kaliumdnger-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lackschrze-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mangabcher-feb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rennmauskfig-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeks.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zirich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zolleralbkreis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agivforni.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-resistenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aztub.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw888.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafissiomo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartidgediscount.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comdevini.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dontly.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiediensten.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastsex.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaxyiptv.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewerblicheversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthybaby.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hittworkout.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochbauamt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingostadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingwerlikoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ini.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinderboxen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwk.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyluckrulesok.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegassun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteorologist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomain.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pphysiotherapie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psycose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recuperaunamorperdido.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redfis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redioimagenes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redlighttherapymachines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooky.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tijd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utazzithon.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodagfone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchasian.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wepauto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelbearings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiesenschaumkraut.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcontinental.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwelpajote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kaliumdnger-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lackschrze-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mangabcher-feb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rennmauskfig-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeks.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zirich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zolleralbkreis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc32416d4000004030048304602210089eda38fdfd06305914b79256e29c20180eb09dc537ddb0a616dc143281c4838022100b204630d0d7f95129b3e292fd1b08a3d36e4f7d1a40a0fd46f93ef55eec670d500770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bc324171a0000040300483046022100c1326b2ead614ad76e689f8941e6e9d2ebd38d95bde0492e43eab4a9cfc6b5db022100f8f2913f269d72f0b9d607b87ae0aad0fb885026768b37864a9f8e8d224a232c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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