ediba.it

Issued by R3

About this certificate

This digital certificate with serial number 04:3a:fd:2b:88:69:fe:39:b8:8b:ef:8a:ba:37:e8:70:d4:2a was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ediba.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3a:fd:2b:88:69:fe:39:b8:8b:ef:8a:ba:37:e8:70:d4:2a
Serial Number (int): 368522041726959260314192079111765114278954
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1b:9a:87:a0:b3:af:82:d0:7c:0b:cf:e7:c7:4e:8c:5c:53:a9:b7:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:68:f2:83:92:a9:e1:f3:ea:3b:f9:1e:d2:01:57:2e:ff:67:38:fb
Fingerprint (sha256): 4e:4a:ed:fd:ad:fb:35:b9:67:60:2f:09:16:37:e7:02:98:76:bc:cd:2e:c7:82:ed:5b:68:c3:8d:d0:53:f1:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ediba.it

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ediba.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bxsex.cc
*.corrierediromagna.it
*.dnver.co
*.ediba.it
*.educationhub.com.au
*.eilpflanzen.de
*.electricvehicleexpert.au
*.escortbakeca.it
*.espaciograficosa.com
*.finanuchek.de
*.fortnigeburger.net
*.getprotected.com.au
*.glandula-submandibularis.de
*.goodpicturetoobservetoday.info
*.hand-picked-opiniontoglancetoday.info
*.harperdevere.com
*.homesauna.com.au
*.honolulu.com.au
*.hznzcn.co
*.i-n-t-e-r-n-e-t.info
*.ieldstreet.com
*.konicorp.com
*.leukaeie.de
*.mangled.name
*.manhun.com
*.notasalvador.xyz
*.onlineflower.com.au
*.pasqualettoauto.it
*.pdi-pl.com.au
*.pentecontente.com
*.perthelectricalforce.com.au
*.piltonvalleyproduce.com.au
*.pp4888.com
*.proostata.de
*.raleighlightbulb.com
*.rapidspeed.com.au
*.rapidtests.net.au
*.roysrecyclingservice.com
*.schuessler-salze-wechseljahre.de
*.scothporter.com
*.stromark.online
*.testteacher.online
*.vollweibdiaet.de
*.was-hilft-bei-erkaeltung.de
*.xn--billigflgea-0hb.de
*.xn--brustveegrerung-zib40b.de
*.xn--de-lungenentzndung-y6b.de
*.xn--leukmie-behandlung-otb.de
*.xn--schnelle-mittel-gegen-erkltung-ktc.de
bxsex.cc
corrierediromagna.it
dnver.co
ediba.it
educationhub.com.au
eilpflanzen.de
electricvehicleexpert.au
escortbakeca.it
espaciograficosa.com
finanuchek.de
fortnigeburger.net
getprotected.com.au
glandula-submandibularis.de
goodpicturetoobservetoday.info
hand-picked-opiniontoglancetoday.info
harperdevere.com
homesauna.com.au
honolulu.com.au
hznzcn.co
i-n-t-e-r-n-e-t.info
ieldstreet.com
konicorp.com
leukaeie.de
mangled.name
manhun.com
notasalvador.xyz
onlineflower.com.au
pasqualettoauto.it
pdi-pl.com.au
pentecontente.com
perthelectricalforce.com.au
piltonvalleyproduce.com.au
pp4888.com
proostata.de
raleighlightbulb.com
rapidspeed.com.au
rapidtests.net.au
roysrecyclingservice.com
schuessler-salze-wechseljahre.de
scothporter.com
stromark.online
testteacher.online
vollweibdiaet.de
was-hilft-bei-erkaeltung.de
xn--billigflgea-0hb.de
xn--brustveegrerung-zib40b.de
xn--de-lungenentzndung-y6b.de
xn--leukmie-behandlung-otb.de
xn--schnelle-mittel-gegen-erkltung-ktc.de

Other certificates including the domain name ediba.it

(limited to 100 certificates)
ediba.it
pawstastics.com
ediba.it
lib1.eu
ediba.it
ccssservpublic.com

Certificate

The complete raw certificate details for ediba.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368522041726959260314192079111765114278954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 07:56:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 07:56:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ediba.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764103575906193203337155098104247745904395298634397825791346012905917856387133011803695335355108439037178800026673612861032607577815325747230590559275675517402038768202288742124934567016224372976345059031287108551352902472945879118374083757372396504583587361941477574121935699128179400487545291576602911178878151397753456654474649344091386516386470295772092990383347475120250103737689047300076206222662282646448235601868583732084836243918848070099254509070547992283195475624607066743503384154671764997050748287196815922417390396458034225937913492422352792952873199900758868895847279248821657826845199427954201775241012301703025679697228285366940581573065360802389208142705351006665454008550323005703047047369886190407580014196513817607563345691886774858297649218141566163908378983331680397870826735011653662082632397464307632216947391223776638613504453300159950927614428222679669933156906642003129105515887492790491472750655742962149349184087425281631878389654171322352718098053406499325995969219697680121455383948323027347538631867251801850933298266479430589114572512833418714420943056458979695879383733491942080386036514299484568345560958788085522687310636077490144771265912823365089449458762632355536590366825886893759901712826799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b9a87a0b3af82d07c0bcfe7c74e8c5c53a9b706
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bxsex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corrierediromagna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnver.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ediba.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educationhub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eilpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electricvehicleexpert.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escortbakeca.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espaciograficosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finanuchek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortnigeburger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getprotected.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glandula-submandibularis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodpicturetoobservetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hand-picked-opiniontoglancetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harperdevere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homesauna.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honolulu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hznzcn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-n-t-e-r-n-e-t.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ieldstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leukaeie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangled.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manhun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notasalvador.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlineflower.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasqualettoauto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdi-pl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pentecontente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perthelectricalforce.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piltonvalleyproduce.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pp4888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proostata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raleighlightbulb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidspeed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidtests.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roysrecyclingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-salze-wechseljahre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scothporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromark.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testteacher.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vollweibdiaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.was-hilft-bei-erkaeltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--billigflgea-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustveegrerung-zib40b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--de-lungenentzndung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--leukmie-behandlung-otb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnelle-mittel-gegen-erkltung-ktc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bxsex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corrierediromagna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnver.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ediba.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationhub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eilpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricvehicleexpert.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escortbakeca.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaciograficosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finanuchek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortnigeburger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getprotected.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glandula-submandibularis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodpicturetoobservetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hand-picked-opiniontoglancetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harperdevere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesauna.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honolulu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hznzcn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-n-t-e-r-n-e-t.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieldstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leukaeie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangled.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notasalvador.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineflower.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasqualettoauto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdi-pl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentecontente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perthelectricalforce.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piltonvalleyproduce.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp4888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proostata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighlightbulb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidspeed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidtests.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roysrecyclingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-salze-wechseljahre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scothporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromark.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testteacher.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vollweibdiaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'was-hilft-bei-erkaeltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--billigflgea-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustveegrerung-zib40b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--de-lungenentzndung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--leukmie-behandlung-otb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnelle-mittel-gegen-erkltung-ktc.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0c56677200000403004730450220737520dfbcf43ab28f5593f18ecac713c857c2df7c9c49a53622e8f734462263022100df48ab07e10eb43722de9c2564d187950abf2a9c29e6a92aee49fee61feb53d10075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0c566772000004030046304402203a272460c5acc4f12c87a46f1e4f50f790e13c214df05946e8266a6d80296318022044e8c93b36153cdd3a0d72228bffdaf24d8878f99dbcf3bc07abbad9211b7ab8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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