tgestsieger.de

Issued by R3

About this certificate

This digital certificate with serial number 04:1c:ce:af:6e:a7:f1:04:49:14:5d:a5:db:90:9a:0b:e8:d0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tgestsieger.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:ce:af:6e:a7:f1:04:49:14:5d:a5:db:90:9a:0b:e8:d0
Serial Number (int): 358251781864279950437867813913883457611984
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:9d:fc:83:be:8a:47:0e:46:68:d7:dd:77:b6:2c:1f:a0:4f:35:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:36:4f:12:6b:8a:ee:16:3e:70:be:fd:66:f9:0a:30:07:9f:1f:66
Fingerprint (sha256): 41:e5:b9:07:a8:3a:46:0f:71:ef:ea:f7:08:59:b0:41:2e:0d:79:43:2f:a9:10:32:43:84:40:b3:56:52:df:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tgestsieger.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tgestsieger.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.8609.in
*.altstake.io
*.aqua.be
*.bk-virus.de
*.bmw6.com.au
*.brillede.de
*.carney-complex.de
*.denhag.com
*.drei-wege-finanzierung.de
*.dressoir.be
*.dynomiteheadlite.com
*.edietreports.com
*.email365.org
*.exotiquecuisine.com
*.fixtwitter.com
*.guanethidin.de
*.hotelreviews.com.au
*.innitus.de
*.jbftransportllc.com
*.jenniferwatkinsphotography.com
*.karzinoidsyndrom.de
*.kashanya.com
*.koerperschema.de
*.marcelopereiramusico.com
*.meanom.de
*.mmsg900132.com
*.myrtillocactus.de
*.myworldphone.co
*.net8.net.br
*.ohtahara-syndrom.de
*.opalandmarigold.com
*.organicbazaar.de
*.otolithen.de
*.psevenmedicaldiagnostics.com
*.pzpz.fun
*.ratesgaming.com
*.shouldigetavasectomy.com
*.sistemadatapro.org
*.stephan.co.za
*.testsiege5r.de
*.testsieget.de
*.tgestsieger.de
*.thecaringpeople.org
*.touchscreenmonitor.com.au
*.truesubmits.com
*.universalisaac.com
*.vocabularty.com
*.xn--immunhmatologie-5kb.de
*.xn--quittungsblcke-5pb.de
*.xn--rschenrcke-kcb9d.de
8609.in
altstake.io
aqua.be
bk-virus.de
bmw6.com.au
brillede.de
carney-complex.de
denhag.com
drei-wege-finanzierung.de
dressoir.be
dynomiteheadlite.com
edietreports.com
email365.org
exotiquecuisine.com
fixtwitter.com
guanethidin.de
hotelreviews.com.au
innitus.de
jbftransportllc.com
jenniferwatkinsphotography.com
karzinoidsyndrom.de
kashanya.com
koerperschema.de
marcelopereiramusico.com
meanom.de
mmsg900132.com
myrtillocactus.de
myworldphone.co
net8.net.br
ohtahara-syndrom.de
opalandmarigold.com
organicbazaar.de
otolithen.de
psevenmedicaldiagnostics.com
pzpz.fun
ratesgaming.com
shouldigetavasectomy.com
sistemadatapro.org
stephan.co.za
testsiege5r.de
testsieget.de
tgestsieger.de
thecaringpeople.org
touchscreenmonitor.com.au
truesubmits.com
universalisaac.com
vocabularty.com
xn--immunhmatologie-5kb.de
xn--quittungsblcke-5pb.de
xn--rschenrcke-kcb9d.de

Other certificates including the domain name tgestsieger.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for tgestsieger.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINYDCCDEigAwIBAgISBBzOr26n8QRJFF2l25CaC+jQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTEyMDA4MTVaFw0yNDA2MDkyMDA4MTRaMBkxFzAVBgNVBAMT
DnRnZXN0c2llZ2VyLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
5Kh9c/eJMnXCiyzskYiYs3Q+ODudj6GJkjLKyFsdPxTNMGqaqyCo+e4b1bB06fBu
tQkwQs0pw3/Pe0StF32S8oilcjyUWb7Dcc39roULilRaRY/NXqCO6y5TFWQ43ciW
sa9tPzEJEszfqCPft/9Ekfoe79nFRGEOAXsAVMH3aJK3cEMz6fqw65WS30+C5kDS
1NYY7wzqm2/wGOK0krG417rlaI4kSnelMk2j6SyZ60dAjvoSqy4LGYThr30DdoZW
lZk5NllMaz705q14b6ZPoYcI4aTPIhG1jTJoZi+i7G2PwMqX6qhftLb95Ig2hjPn
+jn9KbKNZaAby/4NgoxCM3zwHjOqMlt4b7AE0sAxGTGmkxJYLAVWX3Yar3JScFBW
aw88FQx/eTeUEARLhmV4JYRQ9hs7uY3iXwHdMWAJN/0u0VFV3kPskKlMsRQO1rA2
tvA2RUYShvYv4dJxpUosHSzWd471sLOt9Ultn1DfUb/LdjgXX59d5t0i+RZtmIRn
S/XU8QR9rUXyUuSCsIpi9Teq/gyvrSrjSWxsJ5hFgqkmqYA0jso61p/0+KqRSjbp
/lTWscEKNiNzMz6yxoWPHlTYQMI9Rfk9z3JYIKo3ZT3+4eJVKT/QTn8dopLKv906
9Cca0IyhdPvTmWlqESnpcvG5dBmw5HyJgwSOh0CI4msCAwEAAaOCCYcwggmDMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUEZ38g76KRw5GaNfdd7YsH6BPNfwwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggeNBgNVHREEggeEMIIHgIIJKi44NjA5Lmlugg0q
LmFsdHN0YWtlLmlvggkqLmFxdWEuYmWCDSouYmstdmlydXMuZGWCDSouYm13Ni5j
b20uYXWCDSouYnJpbGxlZGUuZGWCEyouY2FybmV5LWNvbXBsZXguZGWCDCouZGVu
aGFnLmNvbYIbKi5kcmVpLXdlZ2UtZmluYW56aWVydW5nLmRlgg0qLmRyZXNzb2ly
LmJlghYqLmR5bm9taXRlaGVhZGxpdGUuY29tghIqLmVkaWV0cmVwb3J0cy5jb22C
DiouZW1haWwzNjUub3JnghUqLmV4b3RpcXVlY3Vpc2luZS5jb22CECouZml4dHdp
dHRlci5jb22CECouZ3VhbmV0aGlkaW4uZGWCFSouaG90ZWxyZXZpZXdzLmNvbS5h
dYIMKi5pbm5pdHVzLmRlghUqLmpiZnRyYW5zcG9ydGxsYy5jb22CICouamVubmlm
ZXJ3YXRraW5zcGhvdG9ncmFwaHkuY29tghUqLmthcnppbm9pZHN5bmRyb20uZGWC
Dioua2FzaGFueWEuY29tghIqLmtvZXJwZXJzY2hlbWEuZGWCGioubWFyY2Vsb3Bl
cmVpcmFtdXNpY28uY29tggsqLm1lYW5vbS5kZYIQKi5tbXNnOTAwMTMyLmNvbYIT
Ki5teXJ0aWxsb2NhY3R1cy5kZYIRKi5teXdvcmxkcGhvbmUuY2+CDSoubmV0OC5u
ZXQuYnKCFSoub2h0YWhhcmEtc3luZHJvbS5kZYIVKi5vcGFsYW5kbWFyaWdvbGQu
Y29tghIqLm9yZ2FuaWNiYXphYXIuZGWCDioub3RvbGl0aGVuLmRlgh4qLnBzZXZl
bm1lZGljYWxkaWFnbm9zdGljcy5jb22CCioucHpwei5mdW6CESoucmF0ZXNnYW1p
bmcuY29tghoqLnNob3VsZGlnZXRhdmFzZWN0b215LmNvbYIUKi5zaXN0ZW1hZGF0
YXByby5vcmeCDyouc3RlcGhhbi5jby56YYIQKi50ZXN0c2llZ2U1ci5kZYIPKi50
ZXN0c2llZ2V0LmRlghAqLnRnZXN0c2llZ2VyLmRlghUqLnRoZWNhcmluZ3Blb3Bs
ZS5vcmeCGyoudG91Y2hzY3JlZW5tb25pdG9yLmNvbS5hdYIRKi50cnVlc3VibWl0
cy5jb22CFCoudW5pdmVyc2FsaXNhYWMuY29tghEqLnZvY2FidWxhcnR5LmNvbYIc
Ki54bi0taW1tdW5obWF0b2xvZ2llLTVrYi5kZYIbKi54bi0tcXVpdHR1bmdzYmxj
a2UtNXBiLmRlghkqLnhuLS1yc2NoZW5yY2tlLWtjYjlkLmRlggc4NjA5Lmluggth
bHRzdGFrZS5pb4IHYXF1YS5iZYILYmstdmlydXMuZGWCC2JtdzYuY29tLmF1ggti
cmlsbGVkZS5kZYIRY2FybmV5LWNvbXBsZXguZGWCCmRlbmhhZy5jb22CGWRyZWkt
d2VnZS1maW5hbnppZXJ1bmcuZGWCC2RyZXNzb2lyLmJlghRkeW5vbWl0ZWhlYWRs
aXRlLmNvbYIQZWRpZXRyZXBvcnRzLmNvbYIMZW1haWwzNjUub3JnghNleG90aXF1
ZWN1aXNpbmUuY29tgg5maXh0d2l0dGVyLmNvbYIOZ3VhbmV0aGlkaW4uZGWCE2hv
dGVscmV2aWV3cy5jb20uYXWCCmlubml0dXMuZGWCE2piZnRyYW5zcG9ydGxsYy5j
b22CHmplbm5pZmVyd2F0a2luc3Bob3RvZ3JhcGh5LmNvbYITa2Fyemlub2lkc3lu
ZHJvbS5kZYIMa2FzaGFueWEuY29tghBrb2VycGVyc2NoZW1hLmRlghhtYXJjZWxv
cGVyZWlyYW11c2ljby5jb22CCW1lYW5vbS5kZYIObW1zZzkwMDEzMi5jb22CEW15
cnRpbGxvY2FjdHVzLmRlgg9teXdvcmxkcGhvbmUuY2+CC25ldDgubmV0LmJyghNv
aHRhaGFyYS1zeW5kcm9tLmRlghNvcGFsYW5kbWFyaWdvbGQuY29tghBvcmdhbmlj
YmF6YWFyLmRlggxvdG9saXRoZW4uZGWCHHBzZXZlbm1lZGljYWxkaWFnbm9zdGlj
cy5jb22CCHB6cHouZnVugg9yYXRlc2dhbWluZy5jb22CGHNob3VsZGlnZXRhdmFz
ZWN0b215LmNvbYISc2lzdGVtYWRhdGFwcm8ub3Jngg1zdGVwaGFuLmNvLnphgg50
ZXN0c2llZ2U1ci5kZYINdGVzdHNpZWdldC5kZYIOdGdlc3RzaWVnZXIuZGWCE3Ro
ZWNhcmluZ3Blb3BsZS5vcmeCGXRvdWNoc2NyZWVubW9uaXRvci5jb20uYXWCD3Ry
dWVzdWJtaXRzLmNvbYISdW5pdmVyc2FsaXNhYWMuY29tgg92b2NhYnVsYXJ0eS5j
b22CGnhuLS1pbW11bmhtYXRvbG9naWUtNWtiLmRlghl4bi0tcXVpdHR1bmdzYmxj
a2UtNXBiLmRlghd4bi0tcnNjaGVucmNrZS1rY2I5ZC5kZTATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ADtTd3U+LbmAToswWwb+
QDtn2E/D9Me9AA0tcm/h+tQXAAABji9YPEQAAAQDAEcwRQIhAJzFdWxQJObJXgzo
A8ocQ3tRNPaY76BwfyOffHTb6CCgAiB7cKGQwuEX+T2oCHxSwDh/BhAdpQCpicja
SlNxrh7IlgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABji9Y
PHEAAAQDAEgwRgIhAMJflknjc/Gw5AIR2YyR2qy+FiMJi57hzznPupX+bgqsAiEA
gaC2FEu76shimET49MmM10AivaTo9c7T09P7Wv7pYd4wDQYJKoZIhvcNAQELBQAD
ggEBAGj2rEBbG3L5eNf6M5NyKoYDWmIRTHrWAkKa2Ld+lrHv0nxlFFfZVteYNFMS
Or8k28WLWDlv6j143Ex42eHrHqDD/3MkgxRDhytu+eAZXfGqy6E0sgdrm1BmjR4l
Pi0ut0Zb7UJKS2UUV8eNzbcDhMo98sFEzd5sGkQUCqsBLLs7Df7Tu+0r+G7MgvUW
1Y0gnKqKgbTVMbo0qDjYFnYrQAglf3mNH2R7Mjwac1V4ptOvuQzyzbUCezZJi7gF
23723hpyWKwFHEC8f6pHy/rsrhK17J5eRD7quyVf8lAF7xsckEb81AFU7vcBcLdz
IAihQGx9XBztSeMrlUDFXBNh+c8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358251781864279950437867813913883457611984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 20:08:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 20:08:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tgestsieger.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932843923430948238382753905787724978105652270694328785376408405344159005014369419529837489804718996350845711106052321981657031774162320333729210353828970628963156115290097696234983993652947332775668621133787619447852309770652449219453322947571040061551242296871269569533883642915587196288370545378995933771219430487939159843090385877437003733892104219590971892190919773179463269017986720554341678071220665858212429071347349815435553459309082057250688341560222931253687804473704139586058753246041259377670690799192366707624970753416744252589073974902190253017540862439391452885481947030860914996002087744427303080101873537647796083924441080463022570038332648260332689432868640878482326568231693403322664608561181206651360243874372406069113134586779770695462537576332951610922242408376682436231296251556450123135175874196677446102628021603429780313021214738977413971269131916799945579123232227223581384434952587873212366232478791131214058425043901788866017631347937501971652447027841694435986209742113066138339154057711241384240195084864365720334642545253592683122314784429734950935895971583462646426603269982575982636114770358687522375036756707464420699931255729098526697675866226280076271026130322728664972261616692414951406512431723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							119dfc83be8a470e4668d7dd77b62c1fa04f35fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1924 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8609.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altstake.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqua.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bk-virus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmw6.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brillede.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carney-complex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denhag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drei-wege-finanzierung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dressoir.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynomiteheadlite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edietreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.email365.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exotiquecuisine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixtwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guanethidin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelreviews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innitus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbftransportllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenniferwatkinsphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karzinoidsyndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kashanya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koerperschema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcelopereiramusico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meanom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmsg900132.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrtillocactus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myworldphone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.net8.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohtahara-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opalandmarigold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organicbazaar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otolithen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psevenmedicaldiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pzpz.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ratesgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shouldigetavasectomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sistemadatapro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stephan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testsiege5r.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testsieget.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tgestsieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecaringpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchscreenmonitor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truesubmits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalisaac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocabularty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--immunhmatologie-5kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--quittungsblcke-5pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rschenrcke-kcb9d.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8609.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altstake.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bk-virus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw6.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brillede.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carney-complex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denhag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drei-wege-finanzierung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dressoir.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynomiteheadlite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edietreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email365.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exotiquecuisine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixtwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guanethidin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelreviews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innitus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbftransportllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenniferwatkinsphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karzinoidsyndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kashanya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koerperschema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcelopereiramusico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meanom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsg900132.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrtillocactus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworldphone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net8.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohtahara-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opalandmarigold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicbazaar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otolithen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psevenmedicaldiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pzpz.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratesgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shouldigetavasectomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemadatapro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsiege5r.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsieget.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgestsieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecaringpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchscreenmonitor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truesubmits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalisaac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocabularty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--immunhmatologie-5kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--quittungsblcke-5pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rschenrcke-kcb9d.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e2f583c4400000403004730450221009cc5756c5024e6c95e0ce803ca1c437b5134f698efa0707f239f7c74dbe820a002207b70a190c2e117f93da8087c52c0387f06101da500a989c8da4a5371ae1ec89600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2f583c710000040300483046022100c25f9649e373f1b0e40211d98c91daacbe1623098b9ee1cf39cfba95fe6e0aac02210081a0b6144bbbeac8629844f8f4c98cd74022bda4e8f5ced3d3d3fb5afee961de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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