ponygeschirr.de

Issued by R3

About this certificate

This digital certificate with serial number 03:f9:56:f7:d1:a9:87:08:10:57:13:06:34:80:b4:d3:e9:37 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ponygeschirr.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:56:f7:d1:a9:87:08:10:57:13:06:34:80:b4:d3:e9:37
Serial Number (int): 346182767516010935062752281658672417073463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:ac:5f:61:55:45:1c:9e:e6:cb:aa:3c:c3:2e:30:d8:70:0d:85:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:ae:0b:53:b0:da:dd:d2:a0:4f:1d:24:72:86:93:7e:a1:e3:0b:a5
Fingerprint (sha256): 3d:1c:a0:5b:47:49:60:d4:49:d7:ef:57:d1:7a:50:7c:1f:63:af:ef:fd:5a:dd:a9:56:5d:2a:b7:7a:9f:ec:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ponygeschirr.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ponygeschirr.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2tkstargps.net
*.4themjewelersny.com
*.alarmcompanytucson.com
*.alleskabel.nl
*.auobd2.com
*.basilicinstant.com
*.bookacourier.com.au
*.cbv.de
*.codermirror.com
*.collarcitycollective.com
*.colouringin.com.au
*.cricvuzz.com
*.djcavedesigns.com
*.dumsetkani.com
*.ecolife.com.au
*.filelist.us
*.guerrillamarketing.com.au
*.inspiration-radio.com
*.kangaroobike.de
*.kfh.au
*.kits.al
*.kleak.com
*.leadinglovespells.com
*.leatherbeltstr.com
*.lemplusarchitectes.com
*.lfu.de
*.liberalrapture.com
*.literature.nl
*.lmtrrvideo.com
*.mm4dx57bc.com
*.msmebengalinvest.in
*.nakedsuper.com.au
*.nasi.au
*.news1ucks.com
*.oil-change-95056.com
*.ponygeschirr.de
*.portfolioreadymockups.com
*.printsydney.com.au
*.realestatefinders.com
*.resolutebay.cc
*.spkpriemka.com
*.sqaurespae.com
*.stromrechner-vergleich.de
*.swz.eu
*.tuparroquia.es
*.veranstalungen.de
*.vseries.me
*.waldominingdistrict.org
*.wmdajo.com
*.yaeatyet.net
2tkstargps.net
4themjewelersny.com
alarmcompanytucson.com
alleskabel.nl
auobd2.com
basilicinstant.com
bookacourier.com.au
cbv.de
codermirror.com
collarcitycollective.com
colouringin.com.au
cricvuzz.com
djcavedesigns.com
dumsetkani.com
ecolife.com.au
filelist.us
guerrillamarketing.com.au
inspiration-radio.com
kangaroobike.de
kfh.au
kits.al
kleak.com
leadinglovespells.com
leatherbeltstr.com
lemplusarchitectes.com
lfu.de
liberalrapture.com
literature.nl
lmtrrvideo.com
mm4dx57bc.com
msmebengalinvest.in
nakedsuper.com.au
nasi.au
news1ucks.com
oil-change-95056.com
ponygeschirr.de
portfolioreadymockups.com
printsydney.com.au
realestatefinders.com
resolutebay.cc
spkpriemka.com
sqaurespae.com
stromrechner-vergleich.de
swz.eu
tuparroquia.es
veranstalungen.de
vseries.me
waldominingdistrict.org
wmdajo.com
yaeatyet.net

Other certificates including the domain name ponygeschirr.de

(limited to 100 certificates)
envacom-strom.de
envacom-strom.de
ponygeschirr.de
ponygeschirr.de
osteoporos.de
ponygeschirr.de
tierkremierung.at
aussiecompetitions.com.au
ponygeschirr.de
seavefrom.net
ponygeschirr.de
ponygeschirr.de

Certificate

The complete raw certificate details for ponygeschirr.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346182767516010935062752281658672417073463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 20:21:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 20:21:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ponygeschirr.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907904030272941926880280188857670291944385871757321141771984934567593431039102291642390264438289438661417016523892350859571197397815347261796690777665610595616638699318639935505331896997410729839449379112736410380101304001208613246319716035916920180310279843561139658318265934098670689609739714788432624168071099589416345619621771553528727541962227581580012985942089394230297612508769596071119860388191400018059220821422768028431398821896217582967394629959426987618831739301129517193129671758510984390886505740769286324844035724903533241320415384337519902642121666087968187602076053677428076261704979129319515335880585175336704720555754374667925000362930270930238322732113911423176780660712279769645927719397578773744118592476455671181424149875664887193119340610420265452384516467556761814717551534053039432829201562725211371492852667014985994240861700084360181595843964750868721310366307682754746740011621611152205918024253189119798146098286358780394555049811002226733125631876386731551250372695721108664178608270026501491647963209130975010324378180238013529749248555652637157021327414381722931142436621200071338098046829516218475472149380770583459850388489164229303157209665222381744992542081074329515524308884910341838526144110409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12ac5f6155451c9ee6cbaa3cc32e30d8700d85b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1840 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2tkstargps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4themjewelersny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alarmcompanytucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alleskabel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auobd2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basilicinstant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookacourier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codermirror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collarcitycollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colouringin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cricvuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djcavedesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dumsetkani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecolife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filelist.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guerrillamarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspiration-radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kangaroobike.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kfh.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kits.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leadinglovespells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leatherbeltstr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemplusarchitectes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lfu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liberalrapture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.literature.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lmtrrvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mm4dx57bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msmebengalinvest.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakedsuper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nasi.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news1ucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oil-change-95056.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ponygeschirr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portfolioreadymockups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestatefinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resolutebay.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spkpriemka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqaurespae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromrechner-vergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swz.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuparroquia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veranstalungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vseries.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waldominingdistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmdajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaeatyet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2tkstargps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4themjewelersny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alarmcompanytucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alleskabel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auobd2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basilicinstant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookacourier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codermirror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collarcitycollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colouringin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricvuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djcavedesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumsetkani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecolife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filelist.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guerrillamarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspiration-radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kangaroobike.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfh.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kits.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadinglovespells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leatherbeltstr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemplusarchitectes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalrapture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literature.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmtrrvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm4dx57bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msmebengalinvest.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakedsuper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasi.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news1ucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oil-change-95056.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponygeschirr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolioreadymockups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatefinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resolutebay.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spkpriemka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqaurespae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromrechner-vergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swz.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuparroquia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veranstalungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vseries.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waldominingdistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmdajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaeatyet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b25c43b0000000403004630440220403b12944426f9f3e4644021a1e33289b5d230aaec2cd998a8094b71a1007de902206bce88aa470cefac4ff139836fd4f72aa5ed305cffbb8ed6535e5dc1510d7e790076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b25c43af5000004030047304502202bf64b9743c79cc164bb94f7240aaf53a4101838f78a56a5e343756e7e882f41022100fe2cebbe6a3318a0336d086d18cf915e01d99e8f4aea69b736340c16cfffbabf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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