heiilkraeuter.de
Issued by R3
About this certificate
This digital certificate with serial number 04:34:08:83:87:8e:d3:e5:38:13:a4:20:97:9d:5a:ec:1e:fc was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=heiilkraeuter.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:34:08:83:87:8e:d3:e5:38:13:a4:20:97:9d:5a:ec:1e:fcSerial Number (int): 366155143571225808091894522076252246646524
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7b:6d:48:13:a3:db:a8:5c:15:e5:00:d2:52:cc:cf:ce:07:3e:db:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b4:dc:58:7c:00:a8:69:78:3b:4e:36:a2:3a:bf:ef:d0:01:b6:8a:49
Fingerprint (sha256): 4b:ad:c8:d1:e7:ac:2a:4f:79:8d:60:d5:c3:38:3d:07:08:e7:24:d5:c0:a0:70:c7:ca:c3:da:b2:9e:ba:29:73
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate heiilkraeuter.de
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for heiilkraeuter.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.2036.be
*.allergytreatments.com.au
*.angelofcorbridge.co.uk
*.apotheekn-umschau.de
*.aryehforcongress.com
*.bruyneel.be
*.cannabisforyou.ca
*.cathedrals.com.au
*.corporats.net
*.datacable.com.au
*.domainz.eu
*.ebayklainanzeige.de
*.enterozyten.de
*.forwarder.us
*.gomunime.tv
*.hadhs.de
*.healthservicediscount.co.uk
*.heiilkraeuter.de
*.hyperkapnie.de
*.iris-versicolor.de
*.j-s.nl
*.kiwipflanze.de
*.kiyocafe.com
*.kraniostenose.de
*.luigi.tv
*.lyell-syndrom.de
*.menkond.co.uk
*.neugeborenensepsis.de
*.ninothetrainer.com
*.pellllenc.com
*.petpharmacy.co.za
*.rabecom.com
*.redhead.net.au
*.redon-drainage.de
*.replies.com.au
*.reyhanakyuzcetin.com
*.st6euererklaerung.de
*.sympttomat.de
*.sz.ie
*.uwaquiz.com
*.v-w.nl
*.wegrauke.de
*.wudertax.de
*.wwwwwwwwwwwwwwwwwwwwwwwwwwwwww.com
*.xn--fasnetsumzge-mlb.de
*.xn--frambsie-r4a.de
*.xn--gnsefingerkraut-0kb.de
*.xn--metallbehlter-jfb.de
*.xn--nervenschdigung-8kb.de
*.xn--spraystrmpfe-klb.de
2036.be
allergytreatments.com.au
angelofcorbridge.co.uk
apotheekn-umschau.de
aryehforcongress.com
bruyneel.be
cannabisforyou.ca
cathedrals.com.au
corporats.net
datacable.com.au
domainz.eu
ebayklainanzeige.de
enterozyten.de
forwarder.us
gomunime.tv
hadhs.de
healthservicediscount.co.uk
heiilkraeuter.de
hyperkapnie.de
iris-versicolor.de
j-s.nl
kiwipflanze.de
kiyocafe.com
kraniostenose.de
luigi.tv
lyell-syndrom.de
menkond.co.uk
neugeborenensepsis.de
ninothetrainer.com
pellllenc.com
petpharmacy.co.za
rabecom.com
redhead.net.au
redon-drainage.de
replies.com.au
reyhanakyuzcetin.com
st6euererklaerung.de
sympttomat.de
sz.ie
uwaquiz.com
v-w.nl
wegrauke.de
wudertax.de
wwwwwwwwwwwwwwwwwwwwwwwwwwwwww.com
xn--fasnetsumzge-mlb.de
xn--frambsie-r4a.de
xn--gnsefingerkraut-0kb.de
xn--metallbehlter-jfb.de
xn--nervenschdigung-8kb.de
xn--spraystrmpfe-klb.de
*.allergytreatments.com.au
*.angelofcorbridge.co.uk
*.apotheekn-umschau.de
*.aryehforcongress.com
*.bruyneel.be
*.cannabisforyou.ca
*.cathedrals.com.au
*.corporats.net
*.datacable.com.au
*.domainz.eu
*.ebayklainanzeige.de
*.enterozyten.de
*.forwarder.us
*.gomunime.tv
*.hadhs.de
*.healthservicediscount.co.uk
*.heiilkraeuter.de
*.hyperkapnie.de
*.iris-versicolor.de
*.j-s.nl
*.kiwipflanze.de
*.kiyocafe.com
*.kraniostenose.de
*.luigi.tv
*.lyell-syndrom.de
*.menkond.co.uk
*.neugeborenensepsis.de
*.ninothetrainer.com
*.pellllenc.com
*.petpharmacy.co.za
*.rabecom.com
*.redhead.net.au
*.redon-drainage.de
*.replies.com.au
*.reyhanakyuzcetin.com
*.st6euererklaerung.de
*.sympttomat.de
*.sz.ie
*.uwaquiz.com
*.v-w.nl
*.wegrauke.de
*.wudertax.de
*.wwwwwwwwwwwwwwwwwwwwwwwwwwwwww.com
*.xn--fasnetsumzge-mlb.de
*.xn--frambsie-r4a.de
*.xn--gnsefingerkraut-0kb.de
*.xn--metallbehlter-jfb.de
*.xn--nervenschdigung-8kb.de
*.xn--spraystrmpfe-klb.de
2036.be
allergytreatments.com.au
angelofcorbridge.co.uk
apotheekn-umschau.de
aryehforcongress.com
bruyneel.be
cannabisforyou.ca
cathedrals.com.au
corporats.net
datacable.com.au
domainz.eu
ebayklainanzeige.de
enterozyten.de
forwarder.us
gomunime.tv
hadhs.de
healthservicediscount.co.uk
heiilkraeuter.de
hyperkapnie.de
iris-versicolor.de
j-s.nl
kiwipflanze.de
kiyocafe.com
kraniostenose.de
luigi.tv
lyell-syndrom.de
menkond.co.uk
neugeborenensepsis.de
ninothetrainer.com
pellllenc.com
petpharmacy.co.za
rabecom.com
redhead.net.au
redon-drainage.de
replies.com.au
reyhanakyuzcetin.com
st6euererklaerung.de
sympttomat.de
sz.ie
uwaquiz.com
v-w.nl
wegrauke.de
wudertax.de
wwwwwwwwwwwwwwwwwwwwwwwwwwwwww.com
xn--fasnetsumzge-mlb.de
xn--frambsie-r4a.de
xn--gnsefingerkraut-0kb.de
xn--metallbehlter-jfb.de
xn--nervenschdigung-8kb.de
xn--spraystrmpfe-klb.de
Other certificates including the domain name heiilkraeuter.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for heiilkraeuter.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINSDCCDDCgAwIBAgISBDQIg4eO0+U4E6Qgl51a7B78MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MTUyMTM1MzdaFw0yMzEwMTMyMTM1MzZaMBsxGTAXBgNVBAMT EGhlaWlsa3JhZXV0ZXIuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC AQCwmBrWj+HDI52DlAf98YQizh6DDP62G+rfDRFabdUo9GDruVCUxXMvFAZt+Yif usxyYhwKo5yezKX07LORua4qhA9FEjbpYnjWT1ODMFc0w+233wIumrIzidI9P5Mg qy7x1gqYJ7F9icvn/acAGKdXDyHeU5/F8IVnx4UGoqUstTUqH/birPUBx9Uu5jB3 R8WAhoN7/EQIYF0QCCXjWn1BbthuUv+lLEWU9WKgGNtjihFUI3vG2Op7SMwy7XdR 8m0YbdXbb662oavmFrVlummhm7sUHfvWSUwCHxVdsGcJWfJIB9C5p7d4rXdpYbCE nodLECRekHjcbj2lPi/ltvWGhydrV6lVuZTlHNHqhUwwm7xo8zHM8H+/WuC9gOwc Q645TXi2nm9ssn5VCh590fPK62FIbtd1cQHsHLGu/149ZRbBzg7cDqo68iNax7PG YX1RkcTs6Or6//s92EHBtmytz0bUAKpvtJEPv2RQ3cxMUoPjOM+iCYJf0KvpKWg3 71j2D3IJv0h2GN9vr8pgxiOisuldzbEGNuZxgdvHkeGcth7dV2Uaa8BE4XUy5bk9 w7qt3MlJLW2Ka1Ecy9XhFVV74IeIyui7ivcVJSwh/DJEuDCD/wJCs1Tip5M65WDb nvQPVLqFBFmVH0KAV+GaKzCNou0b3h24FNp9w9Scjx6+qQIDAQABo4IJbTCCCWkw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR7bUgTo9uoXBXlANJSzM/OBz7bqDAfBgNV HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0 cDovL3IzLmkubGVuY3Iub3JnLzCCB3UGA1UdEQSCB2wwggdoggkqLjIwMzYuYmWC GiouYWxsZXJneXRyZWF0bWVudHMuY29tLmF1ghgqLmFuZ2Vsb2Zjb3JicmlkZ2Uu Y28udWuCFiouYXBvdGhlZWtuLXVtc2NoYXUuZGWCFiouYXJ5ZWhmb3Jjb25ncmVz cy5jb22CDSouYnJ1eW5lZWwuYmWCEyouY2FubmFiaXNmb3J5b3UuY2GCEyouY2F0 aGVkcmFscy5jb20uYXWCDyouY29ycG9yYXRzLm5ldIISKi5kYXRhY2FibGUuY29t LmF1ggwqLmRvbWFpbnouZXWCFSouZWJheWtsYWluYW56ZWlnZS5kZYIQKi5lbnRl cm96eXRlbi5kZYIOKi5mb3J3YXJkZXIudXOCDSouZ29tdW5pbWUudHaCCiouaGFk aHMuZGWCHSouaGVhbHRoc2VydmljZWRpc2NvdW50LmNvLnVrghIqLmhlaWlsa3Jh ZXV0ZXIuZGWCECouaHlwZXJrYXBuaWUuZGWCFCouaXJpcy12ZXJzaWNvbG9yLmRl gggqLmotcy5ubIIQKi5raXdpcGZsYW56ZS5kZYIOKi5raXlvY2FmZS5jb22CEiou a3Jhbmlvc3Rlbm9zZS5kZYIKKi5sdWlnaS50doISKi5seWVsbC1zeW5kcm9tLmRl gg8qLm1lbmtvbmQuY28udWuCFyoubmV1Z2Vib3JlbmVuc2Vwc2lzLmRlghQqLm5p bm90aGV0cmFpbmVyLmNvbYIPKi5wZWxsbGxlbmMuY29tghMqLnBldHBoYXJtYWN5 LmNvLnphgg0qLnJhYmVjb20uY29tghAqLnJlZGhlYWQubmV0LmF1ghMqLnJlZG9u LWRyYWluYWdlLmRlghAqLnJlcGxpZXMuY29tLmF1ghYqLnJleWhhbmFreXV6Y2V0 aW4uY29tghYqLnN0NmV1ZXJlcmtsYWVydW5nLmRlgg8qLnN5bXB0dG9tYXQuZGWC Byouc3ouaWWCDSoudXdhcXVpei5jb22CCCoudi13Lm5sgg0qLndlZ3JhdWtlLmRl gg0qLnd1ZGVydGF4LmRlgiQqLnd3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3 dy5jb22CGSoueG4tLWZhc25ldHN1bXpnZS1tbGIuZGWCFSoueG4tLWZyYW1ic2ll LXI0YS5kZYIcKi54bi0tZ25zZWZpbmdlcmtyYXV0LTBrYi5kZYIaKi54bi0tbWV0 YWxsYmVobHRlci1qZmIuZGWCHCoueG4tLW5lcnZlbnNjaGRpZ3VuZy04a2IuZGWC GSoueG4tLXNwcmF5c3RybXBmZS1rbGIuZGWCBzIwMzYuYmWCGGFsbGVyZ3l0cmVh dG1lbnRzLmNvbS5hdYIWYW5nZWxvZmNvcmJyaWRnZS5jby51a4IUYXBvdGhlZWtu LXVtc2NoYXUuZGWCFGFyeWVoZm9yY29uZ3Jlc3MuY29tggticnV5bmVlbC5iZYIR Y2FubmFiaXNmb3J5b3UuY2GCEWNhdGhlZHJhbHMuY29tLmF1gg1jb3Jwb3JhdHMu bmV0ghBkYXRhY2FibGUuY29tLmF1ggpkb21haW56LmV1ghNlYmF5a2xhaW5hbnpl aWdlLmRlgg5lbnRlcm96eXRlbi5kZYIMZm9yd2FyZGVyLnVzggtnb211bmltZS50 doIIaGFkaHMuZGWCG2hlYWx0aHNlcnZpY2VkaXNjb3VudC5jby51a4IQaGVpaWxr cmFldXRlci5kZYIOaHlwZXJrYXBuaWUuZGWCEmlyaXMtdmVyc2ljb2xvci5kZYIG ai1zLm5sgg5raXdpcGZsYW56ZS5kZYIMa2l5b2NhZmUuY29tghBrcmFuaW9zdGVu b3NlLmRlgghsdWlnaS50doIQbHllbGwtc3luZHJvbS5kZYINbWVua29uZC5jby51 a4IVbmV1Z2Vib3JlbmVuc2Vwc2lzLmRlghJuaW5vdGhldHJhaW5lci5jb22CDXBl bGxsbGVuYy5jb22CEXBldHBoYXJtYWN5LmNvLnphggtyYWJlY29tLmNvbYIOcmVk aGVhZC5uZXQuYXWCEXJlZG9uLWRyYWluYWdlLmRlgg5yZXBsaWVzLmNvbS5hdYIU cmV5aGFuYWt5dXpjZXRpbi5jb22CFHN0NmV1ZXJlcmtsYWVydW5nLmRlgg1zeW1w dHRvbWF0LmRlggVzei5pZYILdXdhcXVpei5jb22CBnYtdy5ubIILd2VncmF1a2Uu ZGWCC3d1ZGVydGF4LmRlgiJ3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3cu Y29tghd4bi0tZmFzbmV0c3VtemdlLW1sYi5kZYITeG4tLWZyYW1ic2llLXI0YS5k ZYIaeG4tLWduc2VmaW5nZXJrcmF1dC0wa2IuZGWCGHhuLS1tZXRhbGxiZWhsdGVy LWpmYi5kZYIaeG4tLW5lcnZlbnNjaGRpZ3VuZy04a2IuZGWCF3huLS1zcHJheXN0 cm1wZmUta2xiLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIE AgSB9ASB8QDvAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJ W7H7XAAABAMARzBFAiBFvBWmPH/4KPw/HwfJtN5np2ovOJS/SCF4Wp6p5HlBmwIh AORpOBfSmzFTTpweERyUDcK8sn1oRjDxKdWRFEQStLiEAHUArfe++nz/EMiLnT2c Hj4YarRnKV3PsQwkyoWGNOvcgooAAAGJW7H7gQAABAMARjBEAiAFG8yxJHJU8IDb qQ5OeG65sRUNSCkwJtICsqKe1JLXOQIgKcV7LNGEzVYXT4vVrKDqNFpF/F1P4GRm /fiFkxNCXwswDQYJKoZIhvcNAQELBQADggEBAKWH3YVzsR8na+iiQtUScfJzTmN4 WKeIr4ePzK5tPOyZV+c8d/eYMNFW1InXiM2PYOmvNJlYg5M7J6MeU4Ctigs6d+e8 E12Hpiaw0iD453wyB15Ncyl3hm+7q5VYxiduraUTVgssbVrY77jrcB60uNCv1kFv aBfzK4Cz3Ui8Ok7/qOPLD2L8AX6soG2OwnlyIRToABrrRwL6Pn5sEcN/88lZw7uL Xda6rJNBmYBgwRKEA+t86IMjW/YNqrtCHEk7S8LHKNCv3+7jYdYn5GXXF3tlboIm sXFsg8Td5iIafA7DHSVg9dpOwJ9fRrlfrMM7xlYKk1xmjrGlciA92GXqcwY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsJga1o/hwyOdg5QH/fGE Is4egwz+thvq3w0RWm3VKPRg67lQlMVzLxQGbfmIn7rMcmIcCqOcnsyl9Oyzkbmu KoQPRRI26WJ41k9TgzBXNMPtt98CLpqyM4nSPT+TIKsu8dYKmCexfYnL5/2nABin Vw8h3lOfxfCFZ8eFBqKlLLU1Kh/24qz1AcfVLuYwd0fFgIaDe/xECGBdEAgl41p9 QW7YblL/pSxFlPVioBjbY4oRVCN7xtjqe0jMMu13UfJtGG3V22+utqGr5ha1Zbpp oZu7FB371klMAh8VXbBnCVnySAfQuae3eK13aWGwhJ6HSxAkXpB43G49pT4v5bb1 hocna1epVbmU5RzR6oVMMJu8aPMxzPB/v1rgvYDsHEOuOU14tp5vbLJ+VQoefdHz yuthSG7XdXEB7Byxrv9ePWUWwc4O3A6qOvIjWsezxmF9UZHE7Ojq+v/7PdhBwbZs rc9G1ACqb7SRD79kUN3MTFKD4zjPogmCX9Cr6SloN+9Y9g9yCb9Idhjfb6/KYMYj orLpXc2xBjbmcYHbx5HhnLYe3VdlGmvAROF1MuW5PcO6rdzJSS1timtRHMvV4RVV e+CHiMrou4r3FSUsIfwyRLgwg/8CQrNU4qeTOuVg2570D1S6hQRZlR9CgFfhmisw jaLtG94duBTafcPUnI8evqkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 366155143571225808091894522076252246646524 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 21:35:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 21:35:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heiilkraeuter.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720441315322200608025214416869888675172492227142835017948056570082473730233051000526872221257105056116011344468974742305275024320117100990375467442360049280562577016402654196820530543670295426231804328693717369047044473473656805022406379515426706730891293612232650730931595951404212076134987715350812242815593682752811606125012318162457763065439684714420503317221813924074704821828085908866158976112124059628586438113237585183339753392720330147089153075339213559907576295797590307032025939175205021704754540915357387511885057264075120116453807555320766049365730115970081354445239598624512613099360544133156035805367584547742744040253307388785583998083155523889078806163335693363153526316963340273192835232653983759322791683770764572678612678356267813901224260987055095759193514453594737820965476402515747974051090924383578358265304496036924215581648250184650915237665076658346655927963948478372473709783043634283285499474987877376979304503773335403694659861259095162949342830166699168716494531818767456858514733606346946125164722646050846702746681981558174534413946203543012553335944529315027826890961552858540022124847040008665125481894626120891534027141562615925510970277007485332576480972052834747454300402660104744076061842521769 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7b6d4813a3dba85c15e500d252cccfce073edba8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1900 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2036.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allergytreatments.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelofcorbridge.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apotheekn-umschau.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aryehforcongress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bruyneel.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannabisforyou.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cathedrals.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporats.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datacable.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainz.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebayklainanzeige.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enterozyten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forwarder.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gomunime.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hadhs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthservicediscount.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heiilkraeuter.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyperkapnie.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iris-versicolor.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.j-s.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiwipflanze.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiyocafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraniostenose.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luigi.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyell-syndrom.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menkond.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neugeborenensepsis.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ninothetrainer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pellllenc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petpharmacy.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rabecom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redhead.net.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redon-drainage.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.replies.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reyhanakyuzcetin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.st6euererklaerung.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sympttomat.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sz.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uwaquiz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v-w.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wegrauke.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wudertax.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwwwwwwwwwwwwwwwwwwwwwwwwwwww.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fasnetsumzge-mlb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frambsie-r4a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gnsefingerkraut-0kb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--metallbehlter-jfb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nervenschdigung-8kb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--spraystrmpfe-klb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2036.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allergytreatments.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelofcorbridge.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotheekn-umschau.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aryehforcongress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bruyneel.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisforyou.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedrals.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporats.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacable.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainz.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebayklainanzeige.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterozyten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forwarder.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gomunime.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadhs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthservicediscount.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiilkraeuter.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyperkapnie.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-versicolor.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j-s.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwipflanze.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiyocafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraniostenose.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luigi.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyell-syndrom.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menkond.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neugeborenensepsis.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninothetrainer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pellllenc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petpharmacy.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabecom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redhead.net.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redon-drainage.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replies.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reyhanakyuzcetin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st6euererklaerung.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sympttomat.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sz.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uwaquiz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v-w.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wegrauke.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wudertax.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwwwwwwwwwwwwwwwwwwwwwwwwwww.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fasnetsumzge-mlb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frambsie-r4a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gnsefingerkraut-0kb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--metallbehlter-jfb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nervenschdigung-8kb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--spraystrmpfe-klb.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001895bb1fb5c0000040300473045022045bc15a63c7ff828fc3f1f07c9b4de67a76a2f3894bf4821785a9ea9e479419b022100e4693817d29b31534e9c1e111c940dc2bcb27d684630f129d591144412b4b884007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001895bb1fb8100000403004630440220051bccb1247254f080dba90e4e786eb9b1150d48293026d202b2a29ed492d739022029c57b2cd184cd56174f8bd5aca0ea345a45fc5d4fe06466fdf8859313425f0b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a587dd8573b11f276be8a242d51271f2734e637858a788af878fccae6d3cec9957e73c77f79830d156d489d788cd8f60e9af34995883933b27a31e5380ad8a0b3a77e7bc135d87a626b0d220f8e77c32075e4d732977866fbbab9558c6276eada513560b2c6d5ad8efb8eb701eb4b8d0afd6416f6817f32b80b3dd48bc3a4effa8e3cb0f62fc017eaca06d8ec279722114e8001aeb4702fa3e7e6c11c37ff3c959c3bb8b5dd6baac9341998060c1128403eb7ce883235bf60daabb421c493b4bc2c728d0afdfeee361d627e465d7177b656e8226b1716c83c4dde6221a7c0ec31d2560f5da4ec09f5f46b95facc33bc6560a935c668eb1a572203dd865ea7306