beroepen.be

Issued by R3

About this certificate

This digital certificate with serial number 04:65:9b:68:c2:02:b4:19:6e:11:ae:fd:e6:74:de:09:1f:84 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=beroepen.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:9b:68:c2:02:b4:19:6e:11:ae:fd:e6:74:de:09:1f:84
Serial Number (int): 383024237059277378456822331278589954695044
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:f8:54:d6:1c:32:98:df:62:15:94:87:ab:84:88:72:6d:c1:76:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:a1:5c:39:eb:66:cd:5f:80:c6:f5:e6:d7:43:33:e4:5f:b2:25:3c
Fingerprint (sha256): 33:d5:d7:e0:f0:03:dc:ff:d7:dd:38:61:8e:65:14:f6:69:f9:3e:e8:e7:88:88:d9:24:b7:d6:5c:35:08:46:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate beroepen.be

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beroepen.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.actio.net
*.allorakitchen.com
*.anycd.de
*.beroepen.be
*.bridalaccessories.com.au
*.camera6.com.br
*.creiteurope.de
*.currypaste.de
*.debian.co.za
*.domaingutachter.de
*.fipvu.com
*.gautengopera.org
*.haemolyse.de
*.heiklkraeuter.de
*.heilpraktiekr.de
*.hirschhaid.de
*.hitches.com.au
*.hunde-tierheim.de
*.hydrops-fetalis.de
*.jugendgesetzbuch.de
*.life.marketing
*.lx.co.za
*.marengomining.com
*.mistgeburten.de
*.mrbusiness.com.au
*.olympia.co.za
*.propionibacterium-acnes.de
*.raupendermatitis.de
*.sejiejie123.info
*.shinchutenshi.com
*.sonnemklar.de
*.tesrsieger.de
*.tesstieger.de
*.testsiegher.de
*.tierheim-donauwoerth.de
*.traktorfuehrerschein.de
*.uply.net
*.willprotect.com.au
*.xn--adventsgrsse-llb.de
*.xn--appetittzgler-4ob.de
*.xn--babyglschen-q8a.de
*.xn--bonsaitpfe-kcb.de
*.xn--ditsuppe-1za.de
*.xn--glsersets-w2a.de
*.xn--handkaffeemhlen-9vb.de
*.xn--musterlebenslufe-7nb.de
*.xn--suglingskrankheiten-gwb.de
*.xn--travemde-c6a.de
*.xn--wrterbuchenglisch-zzb.de
*.zederhaus.de
actio.net
allorakitchen.com
anycd.de
beroepen.be
bridalaccessories.com.au
camera6.com.br
creiteurope.de
currypaste.de
debian.co.za
domaingutachter.de
fipvu.com
gautengopera.org
haemolyse.de
heiklkraeuter.de
heilpraktiekr.de
hirschhaid.de
hitches.com.au
hunde-tierheim.de
hydrops-fetalis.de
jugendgesetzbuch.de
life.marketing
lx.co.za
marengomining.com
mistgeburten.de
mrbusiness.com.au
olympia.co.za
propionibacterium-acnes.de
raupendermatitis.de
sejiejie123.info
shinchutenshi.com
sonnemklar.de
tesrsieger.de
tesstieger.de
testsiegher.de
tierheim-donauwoerth.de
traktorfuehrerschein.de
uply.net
willprotect.com.au
xn--adventsgrsse-llb.de
xn--appetittzgler-4ob.de
xn--babyglschen-q8a.de
xn--bonsaitpfe-kcb.de
xn--ditsuppe-1za.de
xn--glsersets-w2a.de
xn--handkaffeemhlen-9vb.de
xn--musterlebenslufe-7nb.de
xn--suglingskrankheiten-gwb.de
xn--travemde-c6a.de
xn--wrterbuchenglisch-zzb.de
zederhaus.de

Other certificates including the domain name beroepen.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for beroepen.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383024237059277378456822331278589954695044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 18:33:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 18:33:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beroepen.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845443447783226288223979230684667745036157851875335233564829798849759395926783998419846437810695908277405397707398543673463081479636104320460182324936702132777185770610239687943819692078408173284949625614236561056146096953540967929324558903135485613431515772547262891394239412497076011835149520092487411510828076291735903176047282358011043348721204887508004805962949791229799618546395662681758586857294069810439667403058993448168316883597572280503068429689582031545567916777054058894433846793643567079579352756146621949869029234145653494384005965530282322534289642805249043168644708990679419918562544657751606914309049249341548141347791417061304573369405058503442972721067773792581492793193788114220011642110716471053552633966364263198065103463232101596935109307849077079906444667193487862001007477459283790835595781789587275354339749538178489419717188980882635578106432347151615239920843718999318634829679255000975236659086903483877741866026411830151047779896210127547186076294401559536550076715570993877472991026654473097674169441396130152860469573341092248464596738286833824336931340739218098571181492181579848678037187577497105363282616594403682225398208986879990137750560946093804740127006484384109599229350064406252268843319769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ef854d61c3298df62159487ab8488726dc17678
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allorakitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anycd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beroepen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridalaccessories.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camera6.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creiteurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currypaste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.debian.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domaingutachter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fipvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gautengopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemolyse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heiklkraeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heilpraktiekr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hirschhaid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hunde-tierheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hydrops-fetalis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jugendgesetzbuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.life.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lx.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marengomining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mistgeburten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olympia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propionibacterium-acnes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raupendermatitis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sejiejie123.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shinchutenshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonnemklar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tesrsieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tesstieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testsiegher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierheim-donauwoerth.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traktorfuehrerschein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uply.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willprotect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--adventsgrsse-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--appetittzgler-4ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--babyglschen-q8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bonsaitpfe-kcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ditsuppe-1za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glsersets-w2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--handkaffeemhlen-9vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--musterlebenslufe-7nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--suglingskrankheiten-gwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--travemde-c6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wrterbuchenglisch-zzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zederhaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allorakitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anycd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beroepen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridalaccessories.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camera6.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creiteurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currypaste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debian.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaingutachter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fipvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gautengopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemolyse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiklkraeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heilpraktiekr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirschhaid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunde-tierheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrops-fetalis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jugendgesetzbuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lx.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marengomining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistgeburten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propionibacterium-acnes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raupendermatitis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sejiejie123.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinchutenshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonnemklar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesrsieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesstieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsiegher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierheim-donauwoerth.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traktorfuehrerschein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uply.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willprotect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--adventsgrsse-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--appetittzgler-4ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--babyglschen-q8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bonsaitpfe-kcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ditsuppe-1za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glsersets-w2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--handkaffeemhlen-9vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--musterlebenslufe-7nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--suglingskrankheiten-gwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--travemde-c6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wrterbuchenglisch-zzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zederhaus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfa03cefb000004030047304502207121963bdf8cf14a505de747c5f0359866d1c3fa5a29adb8a0bac4b90073d62902210091eda362213ab6ba7ed03b61509c5e914a6409c0170b709416853e26c3004bde00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cfa03cf73000004030047304502205c9f56ee2802c7fd03c47f953c7415043bf78e0614cf38cb0c4a1ff50f269fdb022100aea0a928f1674723d48f0810bff235bdf82218c058372e0870e22a24cf1b7369
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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