nayfederal.org

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:0f:ae:e2:0c:e1:a4:d9:6d:24:df:1a:c2:74:15:55:fa was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nayfederal.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:0f:ae:e2:0c:e1:a4:d9:6d:24:df:1a:c2:74:15:55:fa
Serial Number (int): 309677800362489302343031600236498605397498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:4c:67:4c:e5:c9:94:a0:28:13:90:0d:88:17:be:b3:c2:97:30:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:33:4d:cb:a6:5c:ab:1a:b1:77:3d:95:96:9b:28:c7:ef:c2:16:58
Fingerprint (sha256): 40:ea:0f:ee:6c:c2:79:0e:3c:8f:5e:be:df:23:79:2c:2f:18:ac:49:f6:50:fc:91:70:ef:75:1e:cd:82:56:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nayfederal.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nayfederal.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ashikagajo.com
*.bestpricejp.com
*.bptmagazine.com
*.buildinghomeloan.com.au
*.buildinghomeloans.com.au
*.cdaddy.com.au
*.digiley.com
*.e-keinanzeigen.ch
*.e-kleinanzeige.com
*.e-kleinanzeigen.com
*.e-klinanzeigen.ch
*.e-noniya.com
*.easyseek.net
*.eetlustremmer.nl
*.ekleinanzigen.ch
*.fableticss.com
*.fat-burner.be
*.fat-burner.fi
*.fat-burner.fr
*.fatburner.fi
*.fusca-fusca.com.br
*.greatforexspot.com
*.haemorriiden.de
*.haveitallmastery.com
*.hitoduma-lg.com
*.ibrocks.com
*.katespadw.com
*.kinejunsoken.com
*.logicsapp.com
*.lux-reisen.de
*.mauve.com.au
*.nayfederal.org
*.nude-ukranian-cuties.net
*.p-p-e.co.uk
*.primecarecu.com
*.primval.org
*.quijanomartiabogados.com
*.rauf-oder-runter.de
*.rhynlexmedia.com
*.rubegoldburg.com
*.savagemetaldesign.com
*.sbc-diet.com
*.schuessler-saltse.de
*.torrentview33.com
*.trackman.ch
*.uriwari.com
*.vanacorvette.com
*.wao-creative.com
*.wwwarrowheadauto.com
*.yodelco.uk
ashikagajo.com
bestpricejp.com
bptmagazine.com
buildinghomeloan.com.au
buildinghomeloans.com.au
cdaddy.com.au
digiley.com
e-keinanzeigen.ch
e-kleinanzeige.com
e-kleinanzeigen.com
e-klinanzeigen.ch
e-noniya.com
easyseek.net
eetlustremmer.nl
ekleinanzigen.ch
fableticss.com
fat-burner.be
fat-burner.fi
fat-burner.fr
fatburner.fi
fusca-fusca.com.br
greatforexspot.com
haemorriiden.de
haveitallmastery.com
hitoduma-lg.com
ibrocks.com
katespadw.com
kinejunsoken.com
logicsapp.com
lux-reisen.de
mauve.com.au
nayfederal.org
nude-ukranian-cuties.net
p-p-e.co.uk
primecarecu.com
primval.org
quijanomartiabogados.com
rauf-oder-runter.de
rhynlexmedia.com
rubegoldburg.com
savagemetaldesign.com
sbc-diet.com
schuessler-saltse.de
torrentview33.com
trackman.ch
uriwari.com
vanacorvette.com
wao-creative.com
wwwarrowheadauto.com
yodelco.uk

Other certificates including the domain name nayfederal.org

(limited to 100 certificates)
oceanoofgames.com
nayfederal.org
moviestarplanethacker.com
mauve.com.au
clanguage.com
escribaniadevoto.net
cloniallife.com
nayfederal.org
nayfederal.org

Certificate

The complete raw certificate details for nayfederal.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309677800362489302343031600236498605397498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 12:34:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 12:34:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nayfederal.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807502131871308744541060327986625166926170323380875504993984823126800230008432817519573979413172577484861724350969989000272710450678773299654402796065158178788492986727164843951699803223509121835590817017371094223011717894337648444633630534925821804954133420145884546672038677753890107019052045988728450267564005873430533111087391711532013392941637971330741632974593274825222927020027669085741702884802946460712386307825267437614828622207600191425444145049020440100008626053317388089212868958606639099663543583337352104872640461502664445462238848660976625746192843002025782864355189069730888450599830845281160230789319040199072426866093273442382135533249283856639123450857309086794615875477066224336245156033986140774893316118975895352165572731923579599253983383152727078473713936984982117506236785375825472881910947087718986822275857692953564276035822188493577815911538902772694500258682834003530011804882357832921081610190660381336025078231222249023824460324415341825635334113102601266888682705073360559994650931634195889653490468588866050211209020795632671926506788901910816788991032529273174933815842335466700821534619095151803141227923661682507323398515432589920086285808461454661839071472507565502824557106542721866043180157177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							174c674ce5c994a02813900d8817beb3c29730a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashikagajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestpricejp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bptmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildinghomeloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildinghomeloans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdaddy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-keinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-kleinanzeige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-kleinanzeigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-klinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-noniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyseek.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eetlustremmer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekleinanzigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fableticss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fatburner.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fusca-fusca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatforexspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemorriiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haveitallmastery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitoduma-lg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katespadw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinejunsoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lux-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mauve.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nayfederal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nude-ukranian-cuties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p-p-e.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primecarecu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quijanomartiabogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rauf-oder-runter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhynlexmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubegoldburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savagemetaldesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbc-diet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-saltse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentview33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trackman.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uriwari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanacorvette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wao-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwarrowheadauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yodelco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashikagajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpricejp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bptmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildinghomeloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildinghomeloans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdaddy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-keinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-kleinanzeige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-kleinanzeigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-klinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-noniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyseek.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eetlustremmer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekleinanzigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fableticss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatburner.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusca-fusca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatforexspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemorriiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haveitallmastery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitoduma-lg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katespadw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinejunsoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lux-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauve.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nayfederal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nude-ukranian-cuties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-p-e.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primecarecu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quijanomartiabogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauf-oder-runter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhynlexmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubegoldburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savagemetaldesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbc-diet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-saltse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentview33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackman.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uriwari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanacorvette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wao-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwarrowheadauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yodelco.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd330e27d000004030047304502204ca3e23759c93eda53364b0cc2e89df411aa65652825e2fe3348fb03c3dbba1b022100e784a556b2aa0b107bd6242c529755b2cb4f9c3cfc721b85758ed2263562407e0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd330e2870000040300483046022100f3130f7f576259186b2cf287026e3db9fa892bda7461a8e949443bd2fb497042022100b27123c668e1bc7d4297a5e96a846dd73dc7da687bbddfe16053ae0387b6a375
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00863da9cf24f956ef3c73e72c2ddf2b50d0b9b8526142243725267ec3f6976a1de90c9620bfdcdec5a089794a9aff37db6fecfb3c4e51c4499d3502f23a4b92310dc2d37994a15bd41a43df02ede89a8f5159edb2dd55720cad29820bedafbfd5c6ba0f1c206a3daf799d5652f6118c954bb29e7242e3b0e699fdba3150756ae11ca8ee6abe8af0010aaa32cafabcb5e44ba34996036b507ab74130882f1a39d03604c33ecb06b6e9269fa821abb1da5debf81fc234ab9345992ed8ed8fa6ecc1e26e19d41daa274987dba6538488eda1a97e31f2c64de3753ed2bdc26b556d31731f5369cb6c1832e08ff29c28ba6815076d96bfa0e638495befad9c6bd9cd01