futwiz.de

Issued by R3

About this certificate

This digital certificate with serial number 03:ab:e0:b8:01:9d:ca:1b:07:d7:7a:98:31:e3:38:22:00:dc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=futwiz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:e0:b8:01:9d:ca:1b:07:d7:7a:98:31:e3:38:22:00:dc
Serial Number (int): 319823845025222788524326520717717624979676
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:4f:83:25:bb:28:ff:70:bb:61:3e:c8:2e:1c:8a:bc:06:af:44:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:5a:12:3b:34:e4:2e:89:64:88:6c:b0:b3:bb:84:c8:49:ab:f0:b6
Fingerprint (sha256): 4b:28:ec:b3:05:dd:61:5a:dd:80:57:e1:bb:ab:06:8d:90:16:65:c2:d6:d8:45:dd:97:33:03:7f:d8:20:a8:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate futwiz.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for futwiz.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bbcls.org
*.biolnnovations.net
*.bmtinfo.net
*.bogfinanzas.net
*.bouncy.com.au
*.brihaspati.net
*.broadbandspeedtest.net
*.caqh.net
*.chestergate-diy.co.uk
*.clanedly.com
*.descargamusica.me
*.designerhome.com.au
*.drillbit.com.au
*.dryspace.cc
*.fengchedongman.net
*.flyingmodels.org
*.friendlyinnfrankton.co.uk
*.futwiz.de
*.gogoanime.org
*.hotelcoupons.com.au
*.htmlsup.net
*.japanesebayonets.net
*.japanhd.net
*.japanhdv.net
*.kolmev.com
*.lanesherrif.org
*.matrixalamls.net
*.minefield.us
*.minesotaworks.net
*.mwthstreams.com
*.nationalspeechanddebate.org
*.nyccitycenter.org
*.nzm.us
*.oursainsbury.co.uk
*.peakfitnesssthelens.co.uk
*.quobuz.de
*.reachphysc.in
*.schneider-versand.de
*.servicecaranddriver.com
*.shelbycountygov.com
*.spartanburg6.org
*.stewartconnect.org
*.survetmonkey.co.uk
*.switte.in
*.truckdrivingcourse.com.au
*.tvlicensong.co.uk
*.upass.online
*.waterfrontstorage.co.uk
*.wirginwines.co.uk
*.wwwicrimewatch.net
bbcls.org
biolnnovations.net
bmtinfo.net
bogfinanzas.net
bouncy.com.au
brihaspati.net
broadbandspeedtest.net
caqh.net
chestergate-diy.co.uk
clanedly.com
descargamusica.me
designerhome.com.au
drillbit.com.au
dryspace.cc
fengchedongman.net
flyingmodels.org
friendlyinnfrankton.co.uk
futwiz.de
gogoanime.org
hotelcoupons.com.au
htmlsup.net
japanesebayonets.net
japanhd.net
japanhdv.net
kolmev.com
lanesherrif.org
matrixalamls.net
minefield.us
minesotaworks.net
mwthstreams.com
nationalspeechanddebate.org
nyccitycenter.org
nzm.us
oursainsbury.co.uk
peakfitnesssthelens.co.uk
quobuz.de
reachphysc.in
schneider-versand.de
servicecaranddriver.com
shelbycountygov.com
spartanburg6.org
stewartconnect.org
survetmonkey.co.uk
switte.in
truckdrivingcourse.com.au
tvlicensong.co.uk
upass.online
waterfrontstorage.co.uk
wirginwines.co.uk
wwwicrimewatch.net

Other certificates including the domain name futwiz.de

(limited to 100 certificates)
hdfcbankk.com
futwiz.de
futwiz.de
marriotttimeshare.tours
futwiz.de
futwiz.de
futwiz.de
futwiz.de
futwiz.de

Certificate

The complete raw certificate details for futwiz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319823845025222788524326520717717624979676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 05:02:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 05:02:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'futwiz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685217199062367799163879684841309643939551251786450911350520150383446679284746299538995949993025167121556885802987989271127875260962338018313714893831990344791024044370792913622260965091279816729161019528633135180976205461567414003463943789137722792085670579729862428828599073501386397978801705039978146460939630782984451227618734241445854261547881872819857816439659857982085355856432913903922866238343227045649014514479906587209125350169967098321926542781795584165047240620403299705485498490469173098706596773551798530730948026062681448030097517946699805869616005114728677210861146294902942827408669989293919924802658903824034473054054751476393765122083142428180448679971361639627231227492116641136842150774409071880683452124883001022041585917111613470456485291639598762093142992883516992061151941548802240785326406289172236087125857970140493912860488161162927200049181214984712725245920233851570652517149672270525032032205520316097437154125552978874929506831655363296317587703739312618214097477087453750792495015226268717644367071383733412929449923634772283263717153849441723891855815376748362041651375341402745901084956077862397427779272660582442107882155577192315426823585399891220542310645765960977617165243021241242087749697437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a4f8325bb28ff70bb613ec82e1c8abc06af4495
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1892 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbcls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biolnnovations.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmtinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bogfinanzas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bouncy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brihaspati.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadbandspeedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caqh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chestergate-diy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clanedly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.descargamusica.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designerhome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drillbit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dryspace.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fengchedongman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingmodels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendlyinnfrankton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futwiz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gogoanime.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelcoupons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htmlsup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanesebayonets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanhdv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolmev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lanesherrif.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixalamls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minefield.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minesotaworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mwthstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalspeechanddebate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyccitycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oursainsbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peakfitnesssthelens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quobuz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reachphysc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schneider-versand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicecaranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shelbycountygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spartanburg6.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stewartconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survetmonkey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.switte.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truckdrivingcourse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvlicensong.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upass.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterfrontstorage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wirginwines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwicrimewatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbcls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolnnovations.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmtinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogfinanzas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouncy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brihaspati.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadbandspeedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caqh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chestergate-diy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clanedly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descargamusica.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designerhome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drillbit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dryspace.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fengchedongman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingmodels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendlyinnfrankton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futwiz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogoanime.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelcoupons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htmlsup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanesebayonets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanhdv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolmev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanesherrif.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixalamls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minefield.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minesotaworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwthstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalspeechanddebate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyccitycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oursainsbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakfitnesssthelens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quobuz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachphysc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schneider-versand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicecaranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelbycountygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spartanburg6.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survetmonkey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switte.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckdrivingcourse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvlicensong.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upass.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfrontstorage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirginwines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwicrimewatch.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a976f56690000040300483046022100a7a5abab72554d005faf0bf11f97855212797e35d20cfb7aa47f37cb500943000221009aaf19dc2d4c22f02dd31fd933d45237e92363a1cf2fa7a6804a26dd169472d1007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a976f565a0000040300483046022100b61c9158e090f082a4dc850aed5f4608dafbf8a9dc73686ca8d719e6a1129319022100bf7170c2f7a957b3eb85ff2600234e303bb075610cf5d5796f8e5b1e5849a0e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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