bonafides.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:76:6e:6b:a7:a4:77:40:b3:cb:6c:67:7c:4a:e4:d0:61:72 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bonafides.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:76:6e:6b:a7:a4:77:40:b3:cb:6c:67:7c:4a:e4:d0:61:72
Serial Number (int): 388749237079204658646395081620164302627186
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:fa:5f:16:38:47:74:40:87:cf:56:f7:54:be:64:b8:08:0a:93:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:40:05:41:64:90:b9:57:30:67:6a:3a:40:5a:5f:71:30:f1:6a:dd
Fingerprint (sha256): 43:ed:96:93:fc:ff:37:7e:8d:a7:48:71:1d:ad:b0:8a:96:5f:48:e1:07:d6:3e:19:0f:36:d3:d3:d0:6c:e9:be

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bonafides.eu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bonafides.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5c.com.au
*.amazonstorepro.com
*.analsexpraktiken.de
*.aniwatch1.com
*.anyadiary.com
*.apnayojna.in
*.arbeitzam.de
*.bestjav4k.com
*.binterest.de
*.bonafides.eu
*.cokbaska.org
*.delaynieshomeinteriors.co.uk
*.gewuerzregale.de
*.goldmansportz.com
*.japanseeing.com
*.khmaccessories.com
*.kinomnenies.me
*.losmundosdehachero.com
*.mamanonthetrail.com
*.mayapbd.com
*.mo-mo.co
*.nanaimowebsite.ca
*.nicotinamidadenindinukleotidphosphat.de
*.ntestin.online
*.oksanaeliteescort.com
*.putovanjeokosveta.com
*.repolarisation.de
*.rubbishcollectionsydney.com.au
*.scheishaus.de
*.seyyarfirinkonya.com
*.shebu.net
*.squasheros.com
*.tamilgunmedia.com
*.theop03.com
*.timesystem.us
*.tubdvenlinea.com
*.tvtables.com.au
*.velo-city2020.com
*.victorianissan.com
*.vitacardbook.com
*.voicedress.com
*.xn--ehegelbte-v9a.de
*.xn--ernhrungplan-icb.de
*.xn--fitnessgetrnke-gib.de
*.xn--mdchengames-l8a.de
*.xn--mnnerkorsett-gcb.de
*.xn--osterkrbchen-9ib.de
*.xn--unisex-frisre-smb.de
*.xn--unterputzsplkasten-w6b.de
*.yazdaantimes.com
5c.com.au
amazonstorepro.com
analsexpraktiken.de
aniwatch1.com
anyadiary.com
apnayojna.in
arbeitzam.de
bestjav4k.com
binterest.de
bonafides.eu
cokbaska.org
delaynieshomeinteriors.co.uk
gewuerzregale.de
goldmansportz.com
japanseeing.com
khmaccessories.com
kinomnenies.me
losmundosdehachero.com
mamanonthetrail.com
mayapbd.com
mo-mo.co
nanaimowebsite.ca
nicotinamidadenindinukleotidphosphat.de
ntestin.online
oksanaeliteescort.com
putovanjeokosveta.com
repolarisation.de
rubbishcollectionsydney.com.au
scheishaus.de
seyyarfirinkonya.com
shebu.net
squasheros.com
tamilgunmedia.com
theop03.com
timesystem.us
tubdvenlinea.com
tvtables.com.au
velo-city2020.com
victorianissan.com
vitacardbook.com
voicedress.com
xn--ehegelbte-v9a.de
xn--ernhrungplan-icb.de
xn--fitnessgetrnke-gib.de
xn--mdchengames-l8a.de
xn--mnnerkorsett-gcb.de
xn--osterkrbchen-9ib.de
xn--unisex-frisre-smb.de
xn--unterputzsplkasten-w6b.de
yazdaantimes.com

Other certificates including the domain name bonafides.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for bonafides.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388749237079204658646395081620164302627186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 19:48:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 19:48:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bonafides.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865634957840924751700069419787247144521358093379804596717761599191892641989176217829979918452740037695295105455279760526588945702530004796888862732106308520125005833548490994188966460355094868621428511617959226168844781338016180451743782129680469254654745874869268732422295347948856851155966562344169070341235807345469509446760466472901356489348243542732990540651486267220117680392915065815722146356993368128778415635102038481407744110886174322901958530125339870138815511542761334559009323470868284483755782386605749851831642391650753216016278750718038035604823222549824314558626650333901616048221398829322643918179872883850379739841664339321577628089552017721961367639099099324162645280038526869737044396748649468261498415166965274085344317479369138778059740050884076710876681978542462744134044381462597838395594424451353165470740297426087277613636041699001271255463084500843975486935391669804225240537455540220299244976036449167795168663267172474260058586217034293314459631311230232467278980247787854426358985539218505041627688787477114014658030702881479220000057314619002562936943382683100429851421504540314944440186995125601436251260441937171976287457970412805047874763140120314954349773211870783450251164092616841604252902092817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bfa5f163847744087cf56f754be64b8080a9396
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2044 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5c.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonstorepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analsexpraktiken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aniwatch1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anyadiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apnayojna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbeitzam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestjav4k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonafides.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cokbaska.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delaynieshomeinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gewuerzregale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldmansportz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanseeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khmaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinomnenies.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losmundosdehachero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mamanonthetrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayapbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mo-mo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanaimowebsite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicotinamidadenindinukleotidphosphat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntestin.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oksanaeliteescort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.putovanjeokosveta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repolarisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubbishcollectionsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheishaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seyyarfirinkonya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shebu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squasheros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamilgunmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theop03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timesystem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubdvenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvtables.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velo-city2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorianissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitacardbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicedress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ehegelbte-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ernhrungplan-icb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fitnessgetrnke-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mdchengames-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mnnerkorsett-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--osterkrbchen-9ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--unisex-frisre-smb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--unterputzsplkasten-w6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yazdaantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5c.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonstorepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analsexpraktiken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aniwatch1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyadiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnayojna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbeitzam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestjav4k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonafides.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokbaska.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delaynieshomeinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewuerzregale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldmansportz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanseeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinomnenies.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losmundosdehachero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamanonthetrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayapbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo-mo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanaimowebsite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicotinamidadenindinukleotidphosphat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntestin.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oksanaeliteescort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putovanjeokosveta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repolarisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubbishcollectionsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheishaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seyyarfirinkonya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shebu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squasheros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamilgunmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theop03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesystem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubdvenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvtables.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velo-city2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorianissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitacardbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicedress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ehegelbte-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ernhrungplan-icb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fitnessgetrnke-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mdchengames-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mnnerkorsett-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--osterkrbchen-9ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--unisex-frisre-smb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--unterputzsplkasten-w6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yazdaantimes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f6444253d0000040300473045022100c562b00678fa46713a71cf647d0dcac13c841b78f4c238c398edca7a668d2e6d0220275de424d1ad5d7fc41021cea1e72707fa9e5d2984412ceaeaf8bcb812c3728100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f644425830000040300473045022100d484cca77879717b95b95cdf00d04e040e6137ffb1f39fc22d05c7f11374f69c02201f87e9045f63fc8d518878846210dfe58213cdc7d0135204d0c47caf79dff270
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003e17fec4bfd01d5b9338a19114f2327dc5f854a766d38f881f9c4e0d760774c148e6ca5899284eed78d3420831fca062cb74320dd60f2da834d67ef8d2a3a94fafb1fe140fd089694441052fc61c2fae1256c4618ed43b45de24440fe000bd15a63e69ce395a7a0e02ce68ad0f2e9563bd276f1e45eb1af9dccc27069c4c694134f6d9626d331c2c58ca013651e90ea594eca3914193b5507dcefc6bff094b62ac5c61363a179508dfad6b60ad14ace7b3f7f67b8a44b4171fd000601259d815b72d850ff0f33f3bca4695b3c0cbac5acf5d04877c75b7555b6c33008ec48741a35aedbdeddab063b760f83a80dc38c1a6ac55b7f4db216c887f6c56c36fedf9