t.mailkit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 4a:50:35:54:39:72:9b:96:30:47:2c:09:2f:47:c9:5e was issued on by Sectigo Limited.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=t.mailkit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 4a:50:35:54:39:72:9b:96:30:47:2c:09:2f:47:c9:5e
Serial Number (int): 98779337077420403382448979378889541982
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0c:29:32:11:f8:e3:88:56:8e:ad:a6:71:13:5f:4d:37:2c:4f:3b:1e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 82:9f:5c:f2:58:0c:97:94:ca:bf:60:9a:2a:24:10:af:82:59:8f:1b
Fingerprint (sha256): 30:db:c1:8f:33:31:65:08:7e:d7:26:4d:e0:35:19:5f:28:c4:87:6b:bd:d7:26:e6:10:66:22:ec:e3:ec:01:9f

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate t.mailkit.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t.mailkit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t.mailkit.com
t.akce.rent.cz
t.akce.svet-svitidel.cz
t.akcie.rent.sk
t.akcie.svet-svietidiel.sk
t.akcio.lampak.hu
t.allianz.cz
t.centropol.cz
t.club.rossmann.cz
t.dedoma.ro
t.dedoma.sk
t.dine4fit.hu
t.dine4fit.pl
t.dobryemail.cz
t.email.bezvasport.cz
t.email.bezvasport.sk
t.emaildemos.com
t.energie.centropol.cz
t.homecredit.cz
t.homecredit.sk
t.info.nm.cz
t.kaloricketabulky.cz
t.kaloricketabulky.sk
t.kartavyhod.drmax.cz
t.ketodiet.cz
t.ketodiet.sk
t.kusmitea.cz
t.love.activate.cz
t.mail.key4you.cz
t.malfini.com
t.mesacnyvypis.sk
t.mesicnivypis.cz
t.mimilatky.cz
t.mnd.cz
t.naturamed.cz
t.naturamed.sk
t.nea.frogies.gr
t.news.3dden.com
t.news.e-kondomy.cz
t.news.etneteragroup.cz
t.news.superlove.sk
t.newsletter.drmax.cz
t.newsletter.factcool.com
t.newsletter.rossmann.cz
t.nl.toner.shop
t.nl.tonerpartner.cz
t.nl.tonerpartner.hr
t.nl.tonerpartner.pl
t.nl.tonerpartner.ro
t.nl.tonerpartner.si
t.nl.tonerpartner.sk
t.nl.tonerpartners.hu
t.nl.tptoner.at
t.nl.zmgroup.sk
t.notino.at
t.notino.be
t.notino.bg
t.notino.ch
t.notino.co.uk
t.notino.cz
t.notino.de
t.notino.dk
t.notino.ee
t.notino.es
t.notino.fi
t.notino.fr
t.notino.gr
t.notino.hr
t.notino.hu
t.notino.ie
t.notino.it
t.notino.lt
t.notino.lv
t.notino.nl
t.notino.pl
t.notino.pt
t.notino.ro
t.notino.se
t.notino.si
t.notino.sk
t.notino.ua
t.noutati.frogies.ro
t.novinky.centropol.cz
t.novinky.frogies.cz
t.novinky.frogies.sk
t.novinky.volkswagen.cz
t.novita.frogies.it
t.novosti.frogies.ba
t.novosti.frogies.bg
t.novosti.frogies.hr
t.novosti.frogies.rs
t.offerte.luciamo.it
t.omnivery.com
t.pottenpannen.cz
t.pottenpannen.sk
t.pozvanky.nm.cz
t.prazirna.doubleshot.cz
t.promocje.liderlamp.pl
t.promotii.luminam.ro
t.ru.dine4fit.com
t.sonderangebote.beleuchtung.at
t.sonderangebote.beleuchtung.de
t.tablycjakalorijnosti.com.ua
t.ujdonsagok.frogies.hu

Other certificates including the domain name mailkit.com

(limited to 100 certificates)
t.mailkit.com
*.mailkit.com
t.mailkit.com
*.mailkit.com
t.mailkit.com
u.mailkit.com
mailkit.com
u.mailkit.com
u.mailkit.com
mailkit.com
t.mailkit.com
u.mailkit.com

Certificate

The complete raw certificate details for t.mailkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48iF6l75OKU1fQT1aO81
p2vXUdwuTdHgUTLsDXUrw+Am/OjI0QSIvGz7rhvZehBoWSwM1Ikd6lSQQJiYZD3J
H45F0oudllkL8x/vi0HOaEcSnQh88sy1CmPrv/c2GrQFhtArGjXcaoTFL6Lwb2mM
B9xRkYrG8Vmteh6KsJ7hlY5zggN1zvndypS4UdvlCR9IWxSdC7v2aJwuVT5+lNel
Y/CJB7gaYnSZq7LBdZOpyM7WPWVFhjNjowAyXww7a98RFAlTZQrkCogMp6EdbC7U
VUZVu0j+xlDgnDc+apn6v5x7sDfPBX4HHO4SmmZAdLJFHI+BPWvFeFjJVOK63RNi
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98779337077420403382448979378889541982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.mailkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28754976856956340318757409575594394058824502629309663717914477130344457319303109859263489874603763962731170636480434320642139622456463353678591797657955744951023363965028185613308511828660666499409441518554686936164478829287449168726486813010046994978661706782533377130525709215552748378711346645211936992166401856577240069933170561557844982494705723192189433393010142145952313984460023861204351485583896979152388337964793826645593645178634750491170382654699443963511026790886018098652300032760071258877059719054273462565365278152642656925156310625804783303443256398419882129898385577595508829950867757234307976094419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c293211f8e388568eada671135f4d372c4f3b1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1919 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mailkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akce.rent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akce.svet-svitidel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akcie.rent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akcie.svet-svietidiel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akcio.lampak.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.allianz.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.club.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dedoma.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dedoma.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dine4fit.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dine4fit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dobryemail.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.email.bezvasport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.email.bezvasport.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.emaildemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.energie.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.homecredit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.info.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kaloricketabulky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kaloricketabulky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kartavyhod.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ketodiet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ketodiet.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kusmitea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.love.activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mail.key4you.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.malfini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mesacnyvypis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mesicnivypis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mimilatky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mnd.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.naturamed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.naturamed.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nea.frogies.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.3dden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.e-kondomy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.etneteragroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.superlove.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.factcool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.toner.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tptoner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.zmgroup.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.noutati.frogies.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.frogies.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.frogies.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.volkswagen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novita.frogies.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novosti.frogies.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novosti.frogies.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novosti.frogies.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novosti.frogies.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.offerte.luciamo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.omnivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pottenpannen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pottenpannen.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pozvanky.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.prazirna.doubleshot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.promocje.liderlamp.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.promotii.luminam.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ru.dine4fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.sonderangebote.beleuchtung.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.sonderangebote.beleuchtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.tablycjakalorijnosti.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ujdonsagok.frogies.hu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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