thematerialgirl.co

Issued by R3

About this certificate

This digital certificate with serial number 04:ed:16:ea:26:97:a0:11:fe:a8:07:9b:8b:30:5b:74:97:28 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thematerialgirl.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:16:ea:26:97:a0:11:fe:a8:07:9b:8b:30:5b:74:97:28
Serial Number (int): 429126523483420124560492767447332093728552
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:51:4b:10:ba:62:84:59:4d:82:31:3a:9c:14:29:7c:0f:50:0c:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:51:12:15:11:72:ec:78:c6:99:63:c8:18:d5:94:9d:1b:e8:e9:e2
Fingerprint (sha256): 44:17:25:53:6b:93:7f:be:77:d6:12:e1:3c:f1:61:2c:ec:6b:33:79:72:e6:62:a8:14:68:4c:6e:31:7a:77:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thematerialgirl.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thematerialgirl.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anglelist.co
*.aquino.es
*.artbooks.au
*.attendintro.com
*.ayturk.net
*.bestfund.nl
*.coursesinnursing.com
*.crookandliers.com
*.dotmash.com
*.familycabos.com
*.glasbalkon.de
*.huilikang.biz
*.ielifestyleseduction.com
*.ihq.nl
*.indecd.com
*.instantquote.au
*.interestonlyloan.au
*.kan78.live
*.midwesteqt.com
*.mountain.com.au
*.nidatee.com
*.ostatnigwizdek.shop
*.ourty.info
*.pflegestuetzpunkte-online.de
*.postings.au
*.qua.es
*.ralan.com.au
*.rapidmovies.site
*.rinderbandwurm.de
*.salina-ny.us
*.shotatogawa.site
*.simplemanbrand.com
*.soccerballs.au
*.speakenglish.au
*.stoppneumonia.site
*.sydneysurfpro.com
*.tellonmy.me
*.thematerialgirl.co
*.tillamookbay.cc
*.ttransfermarkt.de
*.wavehanson.com
*.workprocedures.com.au
*.wormfarms.au
*.x-bit.net
*.xn--bierzapfgerte-lfb.de
*.xn--mikrofonverstrker-2qb.de
*.xn--raumduftgerte-lfb.de
*.xn--zauberbcher-zhb.de
*.zopd.de
*.zxm.de
anglelist.co
aquino.es
artbooks.au
attendintro.com
ayturk.net
bestfund.nl
coursesinnursing.com
crookandliers.com
dotmash.com
familycabos.com
glasbalkon.de
huilikang.biz
ielifestyleseduction.com
ihq.nl
indecd.com
instantquote.au
interestonlyloan.au
kan78.live
midwesteqt.com
mountain.com.au
nidatee.com
ostatnigwizdek.shop
ourty.info
pflegestuetzpunkte-online.de
postings.au
qua.es
ralan.com.au
rapidmovies.site
rinderbandwurm.de
salina-ny.us
shotatogawa.site
simplemanbrand.com
soccerballs.au
speakenglish.au
stoppneumonia.site
sydneysurfpro.com
tellonmy.me
thematerialgirl.co
tillamookbay.cc
ttransfermarkt.de
wavehanson.com
workprocedures.com.au
wormfarms.au
x-bit.net
xn--bierzapfgerte-lfb.de
xn--mikrofonverstrker-2qb.de
xn--raumduftgerte-lfb.de
xn--zauberbcher-zhb.de
zopd.de
zxm.de

Other certificates including the domain name thematerialgirl.co

(limited to 100 certificates)
thematerialgirl.co
www.thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
itstonystark.xyz
itstonystark.xyz
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
*.8xvk.com
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co

Certificate

The complete raw certificate details for thematerialgirl.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3H5NbqyCptHSj69dX4O9
qbc0gepK6JPaYa3V4R5jHSdXzbz6TpAEQh8sEoGx5rsgkHSMux5oJYo+GoeByQIa
LDGw1XJK71mFe8je0BY1D5koFGnbUCdrNgLZbMolTux1b9/RNhfXtQYE01U2XynZ
ZgmXPzZeavtpC678QZwRtxBDgXtd5P20tQj1OoVsbB2GG0PhGLcMPHyroBym0kYZ
RroX0ssPuqb0RRQ5fiWjibZL7f3ZeUy7zlvvoWJ0/J5JtykURjm5Pqify2yTwugU
f/BcWbWVknmjocfh76SQFY6zq4IFiqTrTD+84iCPe1Zf4MhbgfjRlcURvJfLsLx7
fTTnJpvTQbfBaqv0r7G0breq+cfgS3kTlLJ7hFCwHijYHbCQu9XWa9yUYavw8sMl
A/5HwLOYZ0VwjrghiDZ5/5BQ+bVutX+MmpQPYOqgMh+NyPeHVHuPNz3Cok/7Cprt
urnoT+WdAmBcndgsPj+tT0H6Ew8MRwAWNl4O27mmhO5fAU3P8MYgpf4+AlegGr6G
58J7CsDsMyEWx/DAD7X9r3jJf6gQG6QEm3BiE7zpXrXI13V3hsX4B/nsKN0QezJV
ZIEYFzNzKKyCXLXHT+mLjN3fmNs9J7qTVXiHG5CmpIVge4Zldw9LCrqqha85rh/M
tJ63HZsupoOTfabMedq4QDMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429126523483420124560492767447332093728552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 03:17:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 03:17:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thematerialgirl.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899534464974227113138873355825720408824274719964003607379584679631021390818821628840068741376562297832873469321234388517074328017080085285087140184466487482500780089224919844006184794577003010926453250234325405390162333415693063434172542618905094483799039733155535498967160806496742323516428926329659380703826408140318733780954058042997890698111576445607695446982486453462568808044713682660441033100171217688558577868425230443865420351907616928205561065351566652475857310327095143759521391523440992224643777945364796014753767639991239177701545769208456029093488971625506676234281397472549108874346348419712612365722365311193209787091062524504291715327336094265766717571690856028042096766238017146015600951257919326460139862549836321555471072289897636488292880791787176184167067606135836380521920829130422372714713657746967429901994044081930302741209509273380002732092036865676445235458649736146263882740062419713998403615482043644466847339771196436270359389771903062052728329029842262204721673771772662044084620291947858983725579118804422729474956697977985257218837510433611540379468055295492930109561229743722811517790100820215844987507523481208653329469658498662136057881461137131604841821378053030065242816775790135369756705308723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08514b10ba6284594d82313a9c14297c0f500c4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1780 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anglelist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquino.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artbooks.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attendintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayturk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestfund.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coursesinnursing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crookandliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familycabos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glasbalkon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huilikang.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ielifestyleseduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihq.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indecd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instantquote.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interestonlyloan.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kan78.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwesteqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nidatee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ostatnigwizdek.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourty.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pflegestuetzpunkte-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postings.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qua.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ralan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidmovies.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rinderbandwurm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salina-ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shotatogawa.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplemanbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soccerballs.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speakenglish.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoppneumonia.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydneysurfpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tellonmy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thematerialgirl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tillamookbay.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttransfermarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wavehanson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workprocedures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wormfarms.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x-bit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bierzapfgerte-lfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mikrofonverstrker-2qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--raumduftgerte-lfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--zauberbcher-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zopd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zxm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anglelist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquino.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artbooks.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attendintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayturk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfund.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursesinnursing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crookandliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familycabos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasbalkon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huilikang.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ielifestyleseduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihq.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indecd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantquote.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interestonlyloan.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kan78.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwesteqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nidatee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostatnigwizdek.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourty.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pflegestuetzpunkte-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postings.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qua.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidmovies.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinderbandwurm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salina-ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shotatogawa.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplemanbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerballs.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speakenglish.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoppneumonia.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneysurfpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellonmy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thematerialgirl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tillamookbay.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttransfermarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavehanson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workprocedures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wormfarms.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x-bit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bierzapfgerte-lfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mikrofonverstrker-2qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--raumduftgerte-lfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zauberbcher-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zopd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zxm.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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