jzf.de

Issued by R3

About this certificate

This digital certificate with serial number 04:fd:df:f7:a8:97:26:41:e3:fb:7f:03:f4:07:ac:88:e6:c5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jzf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:fd:df:f7:a8:97:26:41:e3:fb:7f:03:f4:07:ac:88:e6:c5
Serial Number (int): 434838286317842618225113678761767194912453
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 64:6e:80:9d:dc:c4:cc:57:29:96:0d:ee:7d:fe:31:68:34:45:45:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:0e:8d:90:f3:0c:0f:b0:fe:e9:75:48:e8:ec:92:1a:e8:36:ef:0c
Fingerprint (sha256): 49:eb:e5:f9:97:3a:22:a1:f6:14:2a:2f:c3:0f:c6:76:a9:dc:04:da:a6:c8:10:a4:d7:e8:32:28:0e:ee:9b:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jzf.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jzf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aflrelations.com
*.amplofy.com
*.bettersiderp.pl
*.cvtreeservice.net
*.divisenkurse.de
*.emilyatacklive.com
*.gedaechtnisluecken.de
*.hopfarmauctionroom.co.uk
*.horoscopopersonal.com
*.iyd.de
*.jns.eu
*.jzf.de
*.kirtonwindows.co.uk
*.livefitness.de
*.manualidades.de
*.mediteran.store
*.nicknames.be
*.nirvanaaistanbull.online
*.non-fungible.me
*.noses.ca
*.ntq.de
*.omegaworld.xyz
*.onoi.store
*.oopslist.com
*.open-web.site
*.outlet.co.za
*.pakistan.co.za
*.pcgamesyard.com
*.phyllis.store
*.quick-dating.site
*.reopen.store
*.snokshop.store
*.spercook.com
*.suitsplus.co.uk
*.switchnames.com
*.tagessxhau.de
*.talktalk.online
*.the-visa.online
*.unk.eu
*.valdesmusica.com
*.vbl.au
*.xn--dstermhle-q9af.de
*.xn--flge-buchen-uhb.de
*.xn--fremdwrte-57a.de
*.xn--glckwunschschreiben-69b.de
*.xn--kchenmaschine-wob.de
*.xn--radunterwsche-jfb.de
*.xn--rehbrcke-b6a.de
*.xn--verdienstmglichkeit-z6b.de
*.zawameki.net
aflrelations.com
amplofy.com
bettersiderp.pl
cvtreeservice.net
divisenkurse.de
emilyatacklive.com
gedaechtnisluecken.de
hopfarmauctionroom.co.uk
horoscopopersonal.com
iyd.de
jns.eu
jzf.de
kirtonwindows.co.uk
livefitness.de
manualidades.de
mediteran.store
nicknames.be
nirvanaaistanbull.online
non-fungible.me
noses.ca
ntq.de
omegaworld.xyz
onoi.store
oopslist.com
open-web.site
outlet.co.za
pakistan.co.za
pcgamesyard.com
phyllis.store
quick-dating.site
reopen.store
snokshop.store
spercook.com
suitsplus.co.uk
switchnames.com
tagessxhau.de
talktalk.online
the-visa.online
unk.eu
valdesmusica.com
vbl.au
xn--dstermhle-q9af.de
xn--flge-buchen-uhb.de
xn--fremdwrte-57a.de
xn--glckwunschschreiben-69b.de
xn--kchenmaschine-wob.de
xn--radunterwsche-jfb.de
xn--rehbrcke-b6a.de
xn--verdienstmglichkeit-z6b.de
zawameki.net

Other certificates including the domain name jzf.de

(limited to 100 certificates)
polenporno.de
jzf.de
jzf.de
jzf.de
cariera.org
jzf.de
jzf.de
jru.de
grand-mal-anfall.de
fo2online.de
grand-mal-anfall.de
jzf.de
lohnsiegel.de

Certificate

The complete raw certificate details for jzf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApuLVQ19sVIazblIAyMlC
W+ZJnuoK9JyH5ktAFzkYsig2SM9kF6sP3l46Ye0ljrL1zNkED+xXYWdahuxy6GmJ
B6lswjxlcU6PCAl9S/T+nHkrTUxyxBHR7ny0dKjfUhLM5G3rzDSGx5FclGUFL5fN
dFrEVyMKoXdf5He/aU7T5dTKBrBwjfVYAEoEVb77zuwhMLfvaTkpBH5euUMTv/UJ
Dzs1/rJ5d842p+BRljcbR3SfgmpUePKKf8TEUakHUP8BKudxLpeXTvUzTRZhDAnp
PEsk0BaO6OcRnzexsH1x77e3+VxIzW8t1CNGgVY7nuWDArgbrLRpCHMQeUntoHlE
W9St52Gi7IovoYO7xKK8tqllC3zrGDcJfCyQuBYdySv7gWlOJ/+YcWBMidMV5+o1
am5wyEomz7mk85aKoYkwMWi8CpGazTC/sUhdtO4ymkdYCK2bSf9UWs3ECWVokv43
k37LqpD92icl7h6dUuA9M0yNpY9pmCeSpjuxuEtxnwNUmgvr0IoUTHRGgNaB6C/z
6B8KqR2wyNTjzmrmMspukueKkyfkt763bo8aow99PJ2VwEVv7UJ+EvecPi1SSzwj
ute7tw3aTma5c16rh5Xaf9gpbYn34QvhcfFCKohBiMwimLEGmOaiC2eyu/STTT9f
SfTp56GjLEZw268wRQIAHDsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434838286317842618225113678761767194912453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 22:29:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-30 22:29:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jzf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 680835751794108100586541444909953915265020516597866735769031497782466895145339083588454429380989853932363577214598480018452652984880876208598533098231448520415035846653030032531919597775782630436842290936974003914537739062109716580518717419677630090423353183026671172174393855912481424337127571558631028109965544121637246926030904088762546036868958371557068906732044558426887375379204197376459063155638687544042698654678061745556409610915672031383962296420235233871328768858767564380651038887674410668306768792575014150290384407499059535112763486041338836797404299857204192882781378114003364930515672087058341949225776464295902977814810221654611135938591615145348194871435407901602361971385815391936860336189431489242311047850176441298421729264600995794302528541649628469873465734557144006548438598304085727073560427709170684746707015268946656861472926874961435865689372108768389580027086915580775134371055740742237160586717234430228230659257357367507307470269893857563939812404275267943749703119000660148665983392712450412050252871346034689900858758617500392972651608072859767224363000395778687703578666396209431475243930967825373877819614800980415588982077546022956263876176282116250230722243437284342677334965367892129324130638907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							646e809ddcc4cc5729960dee7dfe3168344545b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aflrelations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amplofy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettersiderp.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvtreeservice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divisenkurse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emilyatacklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gedaechtnisluecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopfarmauctionroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horoscopopersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iyd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jzf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirtonwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livefitness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manualidades.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediteran.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicknames.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nirvanaaistanbull.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-fungible.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omegaworld.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onoi.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oopslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.open-web.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outlet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcgamesyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phyllis.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quick-dating.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reopen.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snokshop.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spercook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitsplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.switchnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagessxhau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talktalk.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-visa.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valdesmusica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vbl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dstermhle-q9af.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flge-buchen-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremdwrte-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glckwunschschreiben-69b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kchenmaschine-wob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--radunterwsche-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rehbrcke-b6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--verdienstmglichkeit-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zawameki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflrelations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplofy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettersiderp.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvtreeservice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divisenkurse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilyatacklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedaechtnisluecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopfarmauctionroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horoscopopersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jzf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirtonwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livefitness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manualidades.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediteran.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicknames.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvanaaistanbull.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'non-fungible.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegaworld.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onoi.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oopslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open-web.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgamesyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyllis.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quick-dating.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reopen.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snokshop.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spercook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitsplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagessxhau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talktalk.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-visa.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valdesmusica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vbl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dstermhle-q9af.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flge-buchen-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremdwrte-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glckwunschschreiben-69b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kchenmaschine-wob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--radunterwsche-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rehbrcke-b6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--verdienstmglichkeit-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zawameki.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fd622c2b1000004030046304402204133a60444ac04cb4429567a988eb1bcdbf5672dc1f722fe63213e76124d3cdc022059624283b324d87b9b54931dfc8bad03e4beeff0a79840bb82a5432c4e06c3f8007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fd622c3ac0000040300473045022100ad26fe497f3f3b09224f2b03cf7897e72bf9917d210ff3ac3f83df38be2d1ae402205ec10b408a00b3e5b6ba68bcd478756ed5eba0b1b49658da956d29717b0a79c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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