reiterkappen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:c7:b8:48:df:65:b9:c1:36:76:d7:08:a8:7d:09:9e:6b:35 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reiterkappen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c7:b8:48:df:65:b9:c1:36:76:d7:08:a8:7d:09:9e:6b:35
Serial Number (int): 416410291071942854178874037377641110989621
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 46:b9:77:d4:a1:58:13:23:d4:25:68:c5:1a:fd:da:0c:2d:49:7b:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:72:6d:b4:fd:51:50:6f:70:0d:f5:93:ac:0b:5f:65:98:76:80:61
Fingerprint (sha256): 32:78:5e:6b:98:47:5a:a6:0e:eb:c7:a6:45:2f:fd:9b:b0:b7:3c:88:77:bf:07:94:e2:36:5f:b4:2f:81:25:f1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate reiterkappen.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reiterkappen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adrija.de
*.autoskolatesty.cz
*.bth.us
*.cairnsrentalcars.com.au
*.cancan.de
*.dangerousdecibles.org
*.desixxxvideos.in
*.drphone.me
*.e-x.de
*.elitetechsolutions.com.au
*.hochzeitstaggedichte.de
*.hqx.com.au
*.hyorvu.online
*.jug.com.au
*.keratoakanthom.de
*.klinikpsikologmelissaelitok.com
*.laserskin.com.au
*.learningspot.com.au
*.lkennycdp.online
*.luwthansa.de
*.me88.online
*.merceds-benz.it
*.mundodafantasia.com.br
*.perfectportraits.com.au
*.reiterkappen.de
*.renin-angiotensin-aldosteron-system.de
*.rustica.com.br
*.saveamericaspostalservice.org
*.sciology.org
*.silvesterkleid.de
*.sleepersofa.de
*.ssquirt.org
*.sustainables.net
*.sustaining.net
*.tbiasheawreax546-plala.xyz
*.tekparthdfilmizle.co
*.teuton.net
*.videophones.com.au
*.wassermarken.de
*.whitening.com.au
*.windaschenbecher.de
*.wizzaire.de
*.wra.in
*.xn--buchbindegert-mfb.de
*.xn--einkommenssteuererklrung-9bc.de
*.xn--fhrungsseminar-gsb.de
*.xn--fitnessvertrge-hib.de
*.xn--gaderobenmbel-rmb.de
*.xn--kochbuchstnder-fib.de
*.xn--mnnerballet-l8a.de
adrija.de
autoskolatesty.cz
bth.us
cairnsrentalcars.com.au
cancan.de
dangerousdecibles.org
desixxxvideos.in
drphone.me
e-x.de
elitetechsolutions.com.au
hochzeitstaggedichte.de
hqx.com.au
hyorvu.online
jug.com.au
keratoakanthom.de
klinikpsikologmelissaelitok.com
laserskin.com.au
learningspot.com.au
lkennycdp.online
luwthansa.de
me88.online
merceds-benz.it
mundodafantasia.com.br
perfectportraits.com.au
reiterkappen.de
renin-angiotensin-aldosteron-system.de
rustica.com.br
saveamericaspostalservice.org
sciology.org
silvesterkleid.de
sleepersofa.de
ssquirt.org
sustainables.net
sustaining.net
tbiasheawreax546-plala.xyz
tekparthdfilmizle.co
teuton.net
videophones.com.au
wassermarken.de
whitening.com.au
windaschenbecher.de
wizzaire.de
wra.in
xn--buchbindegert-mfb.de
xn--einkommenssteuererklrung-9bc.de
xn--fhrungsseminar-gsb.de
xn--fitnessvertrge-hib.de
xn--gaderobenmbel-rmb.de
xn--kochbuchstnder-fib.de
xn--mnnerballet-l8a.de

Other certificates including the domain name reiterkappen.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for reiterkappen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416410291071942854178874037377641110989621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 11:36:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 11:36:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reiterkappen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739103196039565176377242313164976965248004485568500252926961121240432427358008517149077450270707972548962334598488733995907260987173035956539118003348531329865808258658288126267648790411046496254876319617449637764541934697292931605603169552473361771242623066407140330351592307179846040721773748387395192640715133323559872239239739728588547879216553896730241753201295817688169463953661163687240032870423793543497668926173955903304617339645225294624534358334781247634458014743304295155612156805780948131723087306885970822687540314654464048241284407589600774678363627626745987203751425709969278263459675236061769127348370316122069570063066883505145624004085784416536448189839420724002320043500229311454587919633558838257325351119032326752581977437889704435101791182811857041511254412128434388996298207668358132810845424805904280165765067123744590380236477847421332845010736741776382702681344893773645742999611282897389414090934501199997250825576827859300343217122615322510591216698016651539767682569991538052111603521579984797149682765321206849558857969600070652060655574205386213545148924529849399955467807874714836684552601706722747334775209860112017815997172872030007475999051387532429021039934479083492171967542326487506721660763971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46b977d4a1581323d42568c51afdda0c2d497b5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adrija.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoskolatesty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cairnsrentalcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dangerousdecibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desixxxvideos.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drphone.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-x.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitetechsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hochzeitstaggedichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyorvu.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jug.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keratoakanthom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klinikpsikologmelissaelitok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learningspot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkennycdp.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luwthansa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.me88.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merceds-benz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundodafantasia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectportraits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reiterkappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renin-angiotensin-aldosteron-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rustica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saveamericaspostalservice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvesterkleid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleepersofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssquirt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustainables.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustaining.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbiasheawreax546-plala.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tekparthdfilmizle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teuton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videophones.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wassermarken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitening.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windaschenbecher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wizzaire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wra.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--buchbindegert-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--einkommenssteuererklrung-9bc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fhrungsseminar-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fitnessvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gaderobenmbel-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kochbuchstnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mnnerballet-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adrija.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoskolatesty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cairnsrentalcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dangerousdecibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desixxxvideos.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drphone.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-x.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitetechsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochzeitstaggedichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyorvu.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jug.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keratoakanthom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klinikpsikologmelissaelitok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningspot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkennycdp.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luwthansa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me88.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merceds-benz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundodafantasia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectportraits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reiterkappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renin-angiotensin-aldosteron-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rustica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saveamericaspostalservice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvesterkleid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepersofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssquirt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainables.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustaining.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbiasheawreax546-plala.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekparthdfilmizle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teuton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videophones.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wassermarken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitening.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windaschenbecher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizzaire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wra.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--buchbindegert-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--einkommenssteuererklrung-9bc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fhrungsseminar-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fitnessvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gaderobenmbel-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kochbuchstnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mnnerballet-l8a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f62815f3b00000403004730450220430421796fac0c0cf3829146814e62f16f2b08e9c625eef7e7cf06e62b807e42022100c284a47792a35b0b70a6200ce70873aa92f1e285040dca1f606e592a714893690076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f62815f45000004030047304502200d8821ee635ea3fc4b3951555d022d6cd16365c7f029cb8011f48629e420b1ec0221009f70b24c1b375ac3561be8ce8241e32a04c1ab26e0751d3f7d3414abceb94194
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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