lux-reisen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:a7:f8:6b:33:6e:f1:eb:4b:a1:f5:0a:87:66:67:61:f3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lux-reisen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:a7:f8:6b:33:6e:f1:eb:4b:a1:f5:0a:87:66:67:61:f3
Serial Number (int): 433743006396485399732676452398527521710579
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:14:46:74:fd:53:77:73:a2:e8:c7:0d:a9:91:57:d0:f3:23:d6:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:98:35:e3:67:df:0f:3b:9f:6a:ba:40:00:4e:96:f9:a4:47:8f:05
Fingerprint (sha256): 37:d2:fc:5e:10:99:a7:b0:6a:04:ce:19:bd:a5:cb:2e:d1:32:55:3d:33:fe:04:4b:d0:fe:ec:d9:14:07:6c:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lux-reisen.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lux-reisen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ashikagajo.com
*.bestpricejp.com
*.bptmagazine.com
*.buildinghomeloan.com.au
*.buildinghomeloans.com.au
*.cdaddy.com.au
*.digiley.com
*.e-keinanzeigen.ch
*.e-kleinanzeige.com
*.e-kleinanzeigen.com
*.e-klinanzeigen.ch
*.e-noniya.com
*.easyseek.net
*.eetlustremmer.nl
*.ekleinanzigen.ch
*.fat-burner.be
*.fat-burner.fi
*.fat-burner.fr
*.fatburner.fi
*.fusca-fusca.com.br
*.greatforexspot.com
*.haveitallmastery.com
*.hitoduma-lg.com
*.kinejunsoken.com
*.lux-reisen.de
*.mauve.com.au
*.ndsill.net
*.nude-ukranian-cuties.net
*.open4more.eu
*.opensycc.com
*.p-p-e.co.uk
*.priericaonline.com
*.primecarecu.com
*.primval.org
*.quijanomartiabogados.com
*.rauf-oder-runter.de
*.rhynlexmedia.com
*.rubegoldburg.com
*.savagemetaldesign.com
*.sbc-diet.com
*.stubbyholder.com.au
*.torrentview33.com
*.trackman.ch
*.uriwari.com
*.vanacorvette.com
*.wao-creative.com
*.wwwarrowheadauto.com
*.yodelco.uk
*.yourtexasbenifits.org
*.ztt-japan.com
ashikagajo.com
bestpricejp.com
bptmagazine.com
buildinghomeloan.com.au
buildinghomeloans.com.au
cdaddy.com.au
digiley.com
e-keinanzeigen.ch
e-kleinanzeige.com
e-kleinanzeigen.com
e-klinanzeigen.ch
e-noniya.com
easyseek.net
eetlustremmer.nl
ekleinanzigen.ch
fat-burner.be
fat-burner.fi
fat-burner.fr
fatburner.fi
fusca-fusca.com.br
greatforexspot.com
haveitallmastery.com
hitoduma-lg.com
kinejunsoken.com
lux-reisen.de
mauve.com.au
ndsill.net
nude-ukranian-cuties.net
open4more.eu
opensycc.com
p-p-e.co.uk
priericaonline.com
primecarecu.com
primval.org
quijanomartiabogados.com
rauf-oder-runter.de
rhynlexmedia.com
rubegoldburg.com
savagemetaldesign.com
sbc-diet.com
stubbyholder.com.au
torrentview33.com
trackman.ch
uriwari.com
vanacorvette.com
wao-creative.com
wwwarrowheadauto.com
yodelco.uk
yourtexasbenifits.org
ztt-japan.com

Other certificates including the domain name lux-reisen.de

(limited to 100 certificates)
lux-reisen.de
trackman.ch
lux-reisen.de
nayfederal.org
mauve.com.au
lux-reisen.de
lux-reisen.de
lux-reisen.de
escribaniadevoto.net
lux-reisen.de
lux-reisen.de
trackman.ch
nayfederal.org
lux-reisen.de
lux-reisen.de
lux-reisen.de

Certificate

The complete raw certificate details for lux-reisen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433743006396485399732676452398527521710579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 13:32:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 13:32:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lux-reisen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765326641891677734001004801330081333487573484015336848697459984418494754104272285306953544123679353814072035843463006927536638378414975334643784027576240881518725312297588483475426935969518097237420985846389420504914511146618310154553694521973289662569710494521577633078592820932023389074404145972932880367127467948021747051083084710643440568811172114277746671673477204993874513683607823014541629676616041224384119237443142400062021434093099554804173471099150533881429014353846151462262670687790559735452971720818188438449252614480378502351761404599741697303776301792044916937135828376122160000321227705953808377286221809331486013260474726655335616900632216749669093974864534432735229708200759820487923955588305056869744187890289255052771233712717678882495587261454570936478593635049657111724451787905673368475558629144866682767918653495944987469288575881501323668164208455840834826780850684854292127710005724397286124209849858935379997096576478088460288778140621558952414073989206877990318849266259940210547058632363830525544396031053035706240584379288510090938971869456256722103597853885789923390994804206732466025575904975129372998096758168517244664003257503365205290458162919788726325091467879595692926181308545716432865168671843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31144674fd537773a2e8c70da99157d0f323d699
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashikagajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestpricejp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bptmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildinghomeloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildinghomeloans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdaddy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-keinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-kleinanzeige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-kleinanzeigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-klinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-noniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyseek.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eetlustremmer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekleinanzigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fatburner.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fusca-fusca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatforexspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haveitallmastery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitoduma-lg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinejunsoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lux-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mauve.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ndsill.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nude-ukranian-cuties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.open4more.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opensycc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p-p-e.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.priericaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primecarecu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quijanomartiabogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rauf-oder-runter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhynlexmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubegoldburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savagemetaldesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbc-diet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stubbyholder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentview33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trackman.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uriwari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanacorvette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wao-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwarrowheadauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yodelco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourtexasbenifits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ztt-japan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashikagajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpricejp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bptmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildinghomeloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildinghomeloans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdaddy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-keinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-kleinanzeige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-kleinanzeigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-klinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-noniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyseek.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eetlustremmer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekleinanzigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatburner.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusca-fusca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatforexspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haveitallmastery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitoduma-lg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinejunsoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lux-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauve.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndsill.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nude-ukranian-cuties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open4more.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensycc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-p-e.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priericaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primecarecu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quijanomartiabogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauf-oder-runter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhynlexmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubegoldburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savagemetaldesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbc-diet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stubbyholder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentview33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackman.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uriwari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanacorvette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wao-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwarrowheadauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yodelco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtexasbenifits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ztt-japan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9e67ee62000004030046304402206e72cb123c0aae63af62e8fd87d520a31de861137f1fbee7199f710ae03c9f8102203012bbb950e8e275da8d3b036b42012b31aa0dce18262f61267aa45b59b5d16b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9e67effd00000403004730450220644ca49b842f4889658f57283d58aeb8609ae6852d0b04b9d7ba77c6c166eb24022100d152f2365fe7daf0ead360f340b909f4000bd24c1cc3fddffe9a50ddb1ffa4b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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