xn--kreuwortrtsel-jfb.de

Issued by R3

About this certificate

This digital certificate with serial number 03:2a:43:0a:7a:01:e2:e5:24:21:dd:f9:7d:62:3f:bf:05:1a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xn--kreuwortrtsel-jfb.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:2a:43:0a:7a:01:e2:e5:24:21:dd:f9:7d:62:3f:bf:05:1a
Serial Number (int): 275717829879249750551974575083657491318042
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:61:bf:da:12:71:65:7c:3b:a5:f7:d2:79:2e:e3:8c:c1:d5:46:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 14:c2:fe:e2:f7:cb:c5:43:05:17:2c:78:12:41:c0:3a:af:b2:2d:0a
Fingerprint (sha256): 47:e7:b1:6e:fa:43:ca:8b:0f:bd:ee:ce:55:7f:e6:d5:87:3d:ab:a7:db:8a:23:95:79:96:b4:58:db:61:a2:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xn--kreuwortrtsel-jfb.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--kreuwortrtsel-jfb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.afbfhaefits.info
*.aitours.co.za
*.ambientewaterfeatures.co.uk
*.babykinderzimmer.de
*.ballotrights.org
*.bhuonline.co
*.catholicchurches.com.au
*.deepl.com.br
*.desoxythymidin.de
*.elsterformulr.de
*.fischposter.de
*.g7.com.au
*.gasverbrauchsrechner.de
*.geistlib.xyz
*.gfluge.de
*.golfaccessories.com.au
*.hasenfreigehege.de
*.izlemac78.xyz
*.mercylink.net
*.metbabes.co
*.minicreft.net
*.mohairpullover.de
*.mundspreizer.de
*.myautogril.it
*.mycarfinance247.co.uk
*.mymonstersworld.com
*.openbar.com.au
*.palmcottage.co.uk
*.periny.sk
*.secretescaped.de
*.segelstoff.de
*.sms-online.info
*.teenieschollgirls.net
*.tierheime-krefeld.de
*.trukcs.de
*.versandshopping.de
*.wwwscottsofstow.co.uk
*.xn--benzoesure-w5a.de
*.xn--bilkigflge-heb.de
*.xn--bogenschtzenverein-t6b.de
*.xn--feinsprhsystem-msb.de
*.xn--holunderbltenlikr-f0b1i.de
*.xn--kreuwortrtsel-jfb.de
*.xn--rolloleinwnde-kfb.de
*.xn--rosenbltensirup-5vb.de
*.xn--schilddrsenszintigraphie-2sc.de
*.xn--schrgbilder-o8a.de
*.xn--sklavenvertrge-hib.de
*.xn--teppichfachgeschfte-vwb.de
*.xn--tiketbrse-57a.de
afbfhaefits.info
aitours.co.za
ambientewaterfeatures.co.uk
babykinderzimmer.de
ballotrights.org
bhuonline.co
catholicchurches.com.au
deepl.com.br
desoxythymidin.de
elsterformulr.de
fischposter.de
g7.com.au
gasverbrauchsrechner.de
geistlib.xyz
gfluge.de
golfaccessories.com.au
hasenfreigehege.de
izlemac78.xyz
mercylink.net
metbabes.co
minicreft.net
mohairpullover.de
mundspreizer.de
myautogril.it
mycarfinance247.co.uk
mymonstersworld.com
openbar.com.au
palmcottage.co.uk
periny.sk
secretescaped.de
segelstoff.de
sms-online.info
teenieschollgirls.net
tierheime-krefeld.de
trukcs.de
versandshopping.de
wwwscottsofstow.co.uk
xn--benzoesure-w5a.de
xn--bilkigflge-heb.de
xn--bogenschtzenverein-t6b.de
xn--feinsprhsystem-msb.de
xn--holunderbltenlikr-f0b1i.de
xn--kreuwortrtsel-jfb.de
xn--rolloleinwnde-kfb.de
xn--rosenbltensirup-5vb.de
xn--schilddrsenszintigraphie-2sc.de
xn--schrgbilder-o8a.de
xn--sklavenvertrge-hib.de
xn--teppichfachgeschfte-vwb.de
xn--tiketbrse-57a.de

Other certificates including the domain name xn--kreuwortrtsel-jfb.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for xn--kreuwortrtsel-jfb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275717829879249750551974575083657491318042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 12:30:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 12:30:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--kreuwortrtsel-jfb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790334343316083272839260677473422297687337326357017835636927195242605366169877457823563463029217394488607783086481675993935593317728131878845813702583008974618854644406547985810003114528460811910483576370109376234411432457441001551828575231997414627656434830173360431154765975229075798381506565069575214473449434953579704227703304198396803783854808338787944880266749593585054651768495355389942801197325473853114669847275058489635693390711391220294015906334197771773998496357803901502182769701153137321869607830749963577434818960052219380759328426276802479240280648592720803721324815088129775368946250633041396521947972625456992702818204278828081910731393971723214942195696247035130951842371553192790916233044306262240251609649996672388074004817978062374579427347911327423639014604584776234574447169330210266181127860280172192831018620563422082580862111433244674815418692798993930936873593430413474913908236346574995334339322255473898128216525888352579601540880318002463141687730263738267002670323303290218379319207806865307497131861210990794660544913140762409279659941256686712125718785950432167226308672127572010234665953766401571049265404672676438375914212385965633236356139997863573766215466012434446615032526337288428678468022437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef61bfda1271657c3ba5f7d2792ee38cc1d5462a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afbfhaefits.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aitours.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambientewaterfeatures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babykinderzimmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballotrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhuonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catholicchurches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desoxythymidin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsterformulr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fischposter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g7.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gasverbrauchsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geistlib.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfluge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfaccessories.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasenfreigehege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.izlemac78.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercylink.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metbabes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minicreft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mohairpullover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundspreizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myautogril.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycarfinance247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymonstersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openbar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palmcottage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.periny.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secretescaped.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segelstoff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sms-online.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teenieschollgirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierheime-krefeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trukcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versandshopping.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwscottsofstow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--benzoesure-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bilkigflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bogenschtzenverein-t6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--feinsprhsystem-msb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--holunderbltenlikr-f0b1i.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kreuwortrtsel-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rolloleinwnde-kfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rosenbltensirup-5vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schilddrsenszintigraphie-2sc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schrgbilder-o8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sklavenvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--teppichfachgeschfte-vwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tiketbrse-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbfhaefits.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aitours.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambientewaterfeatures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babykinderzimmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballotrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhuonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicchurches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desoxythymidin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsterformulr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fischposter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasverbrauchsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geistlib.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfluge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfaccessories.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasenfreigehege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izlemac78.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercylink.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metbabes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minicreft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohairpullover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundspreizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myautogril.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycarfinance247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymonstersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openbar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmcottage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'periny.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretescaped.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segelstoff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-online.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenieschollgirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierheime-krefeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trukcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versandshopping.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwscottsofstow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--benzoesure-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bilkigflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bogenschtzenverein-t6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--feinsprhsystem-msb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--holunderbltenlikr-f0b1i.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kreuwortrtsel-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rolloleinwnde-kfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rosenbltensirup-5vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schilddrsenszintigraphie-2sc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schrgbilder-o8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sklavenvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--teppichfachgeschfte-vwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tiketbrse-57a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f62b300870000040300483046022100f45460137fa490bd71becddf64b05a72bbc02fbfac31c762182983be36cbc05a022100959e08a7a211ddcac9d3b13b6810903180133cf3466d458c47355b0619be8bc6007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f62b3010c0000040300473045022010323a5cd3181988abfa26e92b77931b3c359db5bdd18712d66a0fbba4ca93f4022100c42c6d01dad6f8041be831925c4d0b6a15b0c400c6456ebc61d7b877f8b0c949
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00242b1c87e7334a69c2716571c6d76aa53d5a353388f4f767e7f7e23b7f3cdfd82a99a89400bd1b16752c4b7d22a9c33aeabe4fe2ea581938051e438d32c7be4a2b422d389b8af700084e6cf0fc7cb7aca7993e1013ec4bf17b55cdce169738f80ec07414db051c8af4aac2af3991652de3fce3f698dcb977a3b10910a800d6ff563b69f5bff84d211d95c437bb92abc69f4675591b48bb2fb7eda8523dc6764fb846eca198512c648f4221317447052b0ef482b8bacee79e5b337e58755f0812b46d8415b2f4d646bfb9d91be3219877e78cb5a590943f3afae582baff102b51b3bc637e9c1b0547276b5e812a1816a7dc158c97254e244ebcb8cff2693174cb