kreditausfallversicherung.de

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:c6:19:9b:5e:d7:fc:37:3e:4c:ca:55:14:4e:14:d9:2e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kreditausfallversicherung.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:c6:19:9b:5e:d7:fc:37:3e:4c:ca:55:14:4e:14:d9:2e
Serial Number (int): 303454909028430827689039725823032504408366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:1d:c0:47:b9:c7:4a:e5:0b:18:78:c3:04:6b:6a:2a:be:30:c0:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:f2:bd:23:1e:47:3c:02:7c:96:f8:ed:41:f8:fb:22:8f:f7:48:e7
Fingerprint (sha256): 2e:54:4d:6c:b9:c8:b8:2e:87:3e:94:dc:0f:21:ab:1a:a6:3a:b9:a9:e0:c2:70:0b:f4:17:0a:ac:3d:a4:bd:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kreditausfallversicherung.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kreditausfallversicherung.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.almacitunaberk.com
*.altesprache.de
*.appytoy.com
*.bobbycontracting.com
*.boonebasketballacademy.com
*.brustdruesenentzuendung.de
*.craightlist.org
*.descargarcorridos.com
*.dpeedtest.de
*.dvaldezcelular.net
*.dyke.com.au
*.ekonomickestavby.sk
*.engageez.us
*.fare.es
*.fmmoviesz.to
*.hereliesdavidchampagne.com
*.icmawushu.com
*.iconcondo.com
*.imoveisbarradatijuca.com
*.jiuse813.xyz
*.kreditausfallversicherung.de
*.lobbying.com.au
*.lovepicsfotografia.com.br
*.lunchtogo.com
*.meyertheater.com
*.mitteralm.de
*.moivesjoy.plus
*.pianista.net
*.picvideo.net
*.piercingpics.de
*.randshop.de
*.rryc.com
*.seaburnprincess.com
*.sliver.nl
*.socrative.co.uk
*.spieleparadis.de
*.textury.cz
*.uhrenadressen.de
*.virtualvirgina.org
*.waxcente.com
*.wcoc.com
*.willietamayo.com
*.www-rosenheim.de
*.wwwparis.de
*.xn--bischofsmtze-llb.de
*.xn--blumenmrkte-r8a.de
*.xn--botsbrse-r4a.de
*.xn--flohmarktfhrer-psb.de
*.xn--flssigtransporte-kzb.de
*.zah.de
almacitunaberk.com
altesprache.de
appytoy.com
bobbycontracting.com
boonebasketballacademy.com
brustdruesenentzuendung.de
craightlist.org
descargarcorridos.com
dpeedtest.de
dvaldezcelular.net
dyke.com.au
ekonomickestavby.sk
engageez.us
fare.es
fmmoviesz.to
hereliesdavidchampagne.com
icmawushu.com
iconcondo.com
imoveisbarradatijuca.com
jiuse813.xyz
kreditausfallversicherung.de
lobbying.com.au
lovepicsfotografia.com.br
lunchtogo.com
meyertheater.com
mitteralm.de
moivesjoy.plus
pianista.net
picvideo.net
piercingpics.de
randshop.de
rryc.com
seaburnprincess.com
sliver.nl
socrative.co.uk
spieleparadis.de
textury.cz
uhrenadressen.de
virtualvirgina.org
waxcente.com
wcoc.com
willietamayo.com
www-rosenheim.de
wwwparis.de
xn--bischofsmtze-llb.de
xn--blumenmrkte-r8a.de
xn--botsbrse-r4a.de
xn--flohmarktfhrer-psb.de
xn--flssigtransporte-kzb.de
zah.de

Other certificates including the domain name kreditausfallversicherung.de

(limited to 100 certificates)
dxo.biz
kreditausfallversicherung.de
kreditausfallversicherung.de
knittingwool.com.au
adminhelp.com.au
bkcheck.us
kreditausfallversicherung.de
kreditausfallversicherung.de
adminhelp.com.au
kreditausfallversicherung.de
kreditausfallversicherung.de
kreditausfallversicherung.de
kreditausfallversicherung.de

Certificate

The complete raw certificate details for kreditausfallversicherung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINVDCCDDygAwIBAgISA3vGGZte1/w3PkzKVRROFNkuMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTIyMjMwNTJaFw0yNDAxMTAyMjMwNTFaMCcxJTAjBgNVBAMT
HGtyZWRpdGF1c2ZhbGx2ZXJzaWNoZXJ1bmcuZGUwggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQDFcQ0EqchvVRusgX/ER5pbNdEXMnahPZx8arkazgZkiFU8
+1/E+TF17ziNuaSwMVMJxGwEmJBrz0BCL/3PZ1RK8khfwlxnn712nwM36gRTIdaG
9Vu5xGA2zpjeMBTHYIgxc7Nr+oO1VEl1Y08z2TtsbhhTVtUIVqNqgLNx18rBW/yB
fmaa/ezqzvb3k9tSA9mltSRhANougS1Qy49FVlEZ9dJND9P1/miU3rJDsROV+HZx
NnYjWXVsmdRC2Tc3QWhQZzwF6QguNKaK4klQn97HmnSFsS6v0zpdf8zkjXx1COA2
P3Qe2d2FkagODTo/bWCp3ts0dtJvc4emohptxccOCDIHkKsOC5E40VKYJdXm+e3a
Xgoijclqi0WC9LZHTVevXI3qCqE4O7b5jfCSvO+6EROH+4aGB4MRuQccwZ3Oh26q
VgofzLTZZTHvLQ4LbjBhmXe4GMXqf7jh2KCgok4K/UoeVERoA/eY5KWIgP+SVLZc
iHAFFprrUPHULEPtcztPla2/hWFcuAgSqZanhTQ+5tdIHvksQ+6tltjgjTZtoudq
dV4LGte5DUah3HVSuCPWkiY+ZzE7FEO9xpsUQMrNE2BypbXTulhx3j6wcsUbi4mN
R+OUhZZaRoNO5v7nJHmvllnU+IFhRfV3hyXn7HqtF8nAZBgJ+BaexaCAdALMYwID
AQABo4IJbTCCCWkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQoHcBHucdK5QsYeMME
a2oqvjDA0zAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEF
BQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggr
BgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCB3UGA1UdEQSCB2wwggdo
ghQqLmFsbWFjaXR1bmFiZXJrLmNvbYIQKi5hbHRlc3ByYWNoZS5kZYINKi5hcHB5
dG95LmNvbYIWKi5ib2JieWNvbnRyYWN0aW5nLmNvbYIcKi5ib29uZWJhc2tldGJh
bGxhY2FkZW15LmNvbYIcKi5icnVzdGRydWVzZW5lbnR6dWVuZHVuZy5kZYIRKi5j
cmFpZ2h0bGlzdC5vcmeCFyouZGVzY2FyZ2FyY29ycmlkb3MuY29tgg4qLmRwZWVk
dGVzdC5kZYIUKi5kdmFsZGV6Y2VsdWxhci5uZXSCDSouZHlrZS5jb20uYXWCFSou
ZWtvbm9taWNrZXN0YXZieS5za4INKi5lbmdhZ2Vlei51c4IJKi5mYXJlLmVzgg4q
LmZtbW92aWVzei50b4IcKi5oZXJlbGllc2RhdmlkY2hhbXBhZ25lLmNvbYIPKi5p
Y21hd3VzaHUuY29tgg8qLmljb25jb25kby5jb22CGiouaW1vdmVpc2JhcnJhZGF0
aWp1Y2EuY29tgg4qLmppdXNlODEzLnh5eoIeKi5rcmVkaXRhdXNmYWxsdmVyc2lj
aGVydW5nLmRlghEqLmxvYmJ5aW5nLmNvbS5hdYIbKi5sb3ZlcGljc2ZvdG9ncmFm
aWEuY29tLmJygg8qLmx1bmNodG9nby5jb22CEioubWV5ZXJ0aGVhdGVyLmNvbYIO
Ki5taXR0ZXJhbG0uZGWCECoubW9pdmVzam95LnBsdXOCDioucGlhbmlzdGEubmV0
gg4qLnBpY3ZpZGVvLm5ldIIRKi5waWVyY2luZ3BpY3MuZGWCDSoucmFuZHNob3Au
ZGWCCioucnJ5Yy5jb22CFSouc2VhYnVybnByaW5jZXNzLmNvbYILKi5zbGl2ZXIu
bmyCESouc29jcmF0aXZlLmNvLnVrghIqLnNwaWVsZXBhcmFkaXMuZGWCDCoudGV4
dHVyeS5jeoISKi51aHJlbmFkcmVzc2VuLmRlghQqLnZpcnR1YWx2aXJnaW5hLm9y
Z4IOKi53YXhjZW50ZS5jb22CCioud2NvYy5jb22CEioud2lsbGlldGFtYXlvLmNv
bYISKi53d3ctcm9zZW5oZWltLmRlgg0qLnd3d3BhcmlzLmRlghkqLnhuLS1iaXNj
aG9mc210emUtbGxiLmRlghgqLnhuLS1ibHVtZW5tcmt0ZS1yOGEuZGWCFSoueG4t
LWJvdHNicnNlLXI0YS5kZYIbKi54bi0tZmxvaG1hcmt0ZmhyZXItcHNiLmRlgh0q
LnhuLS1mbHNzaWd0cmFuc3BvcnRlLWt6Yi5kZYIIKi56YWguZGWCEmFsbWFjaXR1
bmFiZXJrLmNvbYIOYWx0ZXNwcmFjaGUuZGWCC2FwcHl0b3kuY29tghRib2JieWNv
bnRyYWN0aW5nLmNvbYIaYm9vbmViYXNrZXRiYWxsYWNhZGVteS5jb22CGmJydXN0
ZHJ1ZXNlbmVudHp1ZW5kdW5nLmRlgg9jcmFpZ2h0bGlzdC5vcmeCFWRlc2Nhcmdh
cmNvcnJpZG9zLmNvbYIMZHBlZWR0ZXN0LmRlghJkdmFsZGV6Y2VsdWxhci5uZXSC
C2R5a2UuY29tLmF1ghNla29ub21pY2tlc3RhdmJ5LnNrggtlbmdhZ2Vlei51c4IH
ZmFyZS5lc4IMZm1tb3ZpZXN6LnRvghpoZXJlbGllc2RhdmlkY2hhbXBhZ25lLmNv
bYINaWNtYXd1c2h1LmNvbYINaWNvbmNvbmRvLmNvbYIYaW1vdmVpc2JhcnJhZGF0
aWp1Y2EuY29tggxqaXVzZTgxMy54eXqCHGtyZWRpdGF1c2ZhbGx2ZXJzaWNoZXJ1
bmcuZGWCD2xvYmJ5aW5nLmNvbS5hdYIZbG92ZXBpY3Nmb3RvZ3JhZmlhLmNvbS5i
coINbHVuY2h0b2dvLmNvbYIQbWV5ZXJ0aGVhdGVyLmNvbYIMbWl0dGVyYWxtLmRl
gg5tb2l2ZXNqb3kucGx1c4IMcGlhbmlzdGEubmV0ggxwaWN2aWRlby5uZXSCD3Bp
ZXJjaW5ncGljcy5kZYILcmFuZHNob3AuZGWCCHJyeWMuY29tghNzZWFidXJucHJp
bmNlc3MuY29tgglzbGl2ZXIubmyCD3NvY3JhdGl2ZS5jby51a4IQc3BpZWxlcGFy
YWRpcy5kZYIKdGV4dHVyeS5jeoIQdWhyZW5hZHJlc3Nlbi5kZYISdmlydHVhbHZp
cmdpbmEub3Jnggx3YXhjZW50ZS5jb22CCHdjb2MuY29tghB3aWxsaWV0YW1heW8u
Y29tghB3d3ctcm9zZW5oZWltLmRlggt3d3dwYXJpcy5kZYIXeG4tLWJpc2Nob2Zz
bXR6ZS1sbGIuZGWCFnhuLS1ibHVtZW5tcmt0ZS1yOGEuZGWCE3huLS1ib3RzYnJz
ZS1yNGEuZGWCGXhuLS1mbG9obWFya3RmaHJlci1wc2IuZGWCG3huLS1mbHNzaWd0
cmFuc3BvcnRlLWt6Yi5kZYIGemFoLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0
vaQ9MEjX+6sAAAGLJjqKjgAABAMARjBEAh9e14rTRcdVsS3cFlNzXZEhx8es5Pwc
CJabHS/H8xOjAiEArnmbhF+87qhgXUGd/GuUlyo8ZsnH0p3tqgCysqb94YwAdgA7
U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYsmOoqDAAAEAwBHMEUC
IGauvSHc/p5iIBHLLHrdNxPoSroC+8OSXL0/bHT84CWUAiEA/0ZQ1z3UiLn6ByrZ
n+orrAPU8Eg5bDpPeqsqwrG2L/8wDQYJKoZIhvcNAQELBQADggEBALqZCUXQlk5d
5Znn9wqLfMbPMozydmKwDijOvmeP/SS6fKlJmNDA8ltYc7UsJd2+MEVODStC/Bzs
YuQWwS8D3C3/YpSfhU/C2T6o8MJSgxH9LoNkaXW2+Q2W3WzQAlj8eti2re5Ue5J0
GXkNTPm5FfVAEMgLAoJ8XK6fcvksPMPblXfq2hHK3f+Xw2tdIkrkhQI2jugPaQVd
R+PpVohvBPbZ1MvFsW9BCrk47kDkIfL8kKJAIPXP8uG7lP2VEOkLdcu+FD0f85Aq
bKG6CmWiSQV/ht00nMtEvffS3tgFvq7ra1PQJ8UApTuRBJ0mUjPfNm3RZnwzUpXd
/wLAGBI6KGY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303454909028430827689039725823032504408366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 22:30:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 22:30:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kreditausfallversicherung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805491472178866234637786027067846791508807183328963112221845440319477949251539061188170966920493759405223139674641622388485565546019639402210486078626751310639002448640044338152154346823433510311006542421029291204033712969603049631675615944419067850955122947889530442236711712868569886163595208725276221543434554837822562213087940874744997671856712805714338992339575354629481896379339866689520568014817049727253313483604941234550653414482697729165119125830366510206366553359159675473690415342063879281277420689655491332034934361160018581936462710527821286306508881113628444038691794340808689100991112255750297984502818533949594069180483515558592323605938249623804782013386418537024970475810589827377590844858654373824537716375758006028050849385742210779031162462960883423479669414007420815241494497865198229473674639196943648681390143927113931412734261637408685925513439325414979648500354539176753204234278774126351724326401558872420366615786443228646896186035780572295604510669727321229723431683478649419234382331014319538019161985210756041301722722153614294058192346276606279803718793304048771699730919543430484880902310722266400504523139264854647806442393592750751322221429232213060871972051637279444950743059974729825234318445667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							281dc047b9c74ae50b1878c3046b6a2abe30c0d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1900 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almacitunaberk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altesprache.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appytoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobbycontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boonebasketballacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brustdruesenentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craightlist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.descargarcorridos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dpeedtest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dvaldezcelular.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dyke.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekonomickestavby.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engageez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fare.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmmoviesz.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hereliesdavidchampagne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icmawushu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iconcondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imoveisbarradatijuca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiuse813.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kreditausfallversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lobbying.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovepicsfotografia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunchtogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meyertheater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitteralm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moivesjoy.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pianista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picvideo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piercingpics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rryc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seaburnprincess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sliver.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socrative.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spieleparadis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.textury.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhrenadressen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualvirgina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waxcente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willietamayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-rosenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwparis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bischofsmtze-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blumenmrkte-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--botsbrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flohmarktfhrer-psb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flssigtransporte-kzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zah.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almacitunaberk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altesprache.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appytoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobbycontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonebasketballacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brustdruesenentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craightlist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descargarcorridos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpeedtest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvaldezcelular.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyke.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekonomickestavby.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engageez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fare.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmmoviesz.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hereliesdavidchampagne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icmawushu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iconcondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoveisbarradatijuca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiuse813.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreditausfallversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobbying.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovepicsfotografia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunchtogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyertheater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteralm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moivesjoy.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianista.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picvideo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piercingpics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rryc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaburnprincess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sliver.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socrative.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spieleparadis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textury.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrenadressen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualvirgina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waxcente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willietamayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-rosenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwparis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bischofsmtze-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blumenmrkte-r8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--botsbrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flohmarktfhrer-psb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flssigtransporte-kzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zah.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b263a8a8e0000040300463044021f5ed78ad345c755b12ddc1653735d9121c7c7ace4fc1c08969b1d2fc7f313a3022100ae799b845fbceea8605d419dfc6b94972a3c66c9c7d29dedaa00b2b2a6fde18c0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b263a8a830000040300473045022066aebd21dcfe9e622011cb2c7add3713e84aba02fbc3925cbd3f6c74fce02594022100ff4650d73dd488b9fa072ad99fea2bac03d4f048396c3a4f7aab2ac2b1b62fff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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