jzf.de

Issued by R3

About this certificate

This digital certificate with serial number 03:29:4b:11:85:2c:f1:c2:51:5e:71:60:b8:6e:9d:37:02:6e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jzf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:4b:11:85:2c:f1:c2:51:5e:71:60:b8:6e:9d:37:02:6e
Serial Number (int): 275388217908891017963937123386861259522670
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:65:07:3e:71:f4:6a:17:7d:2a:5f:58:6a:c8:b5:0f:68:d3:94:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 53:db:fd:29:bd:71:d9:79:58:f3:82:a4:be:51:b4:ac:ba:2c:48:a1
Fingerprint (sha256): 51:98:36:ef:23:af:e8:02:c8:d2:d3:fe:cf:7f:19:e9:55:32:81:e8:83:da:25:51:b1:e8:5f:43:4b:38:e0:b2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jzf.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jzf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aberturasdg.com
*.adsforearn.com
*.aflrelations.com
*.amplofy.com
*.beidish.com
*.btbtt114.com
*.bubbleled.com
*.chateaudebeauregard.net
*.cosyhomesinteriors.com
*.darkdormneighbors.com
*.emilyatacklive.com
*.excavationcoffrageap.com
*.gardengreater.com
*.hopfarmauctionroom.co.uk
*.horoscopopersonal.com
*.indded.com.au
*.indianmuseum-calcutta.org
*.infoaha.com
*.jns.eu
*.jugueteandoperu.com
*.jzf.de
*.kirtonwindows.co.uk
*.litzonegaming-de.com
*.livefitness.de
*.livelorecompensa.info
*.made-lv.com
*.manualidades.de
*.mekonsportswear.com
*.metaav.cyou
*.nicknames.be
*.non-fungible.me
*.noses.ca
*.oopslist.com
*.pakistan.co.za
*.pcgamesyard.com
*.shalasol.com
*.silvercreekgolfcarts.com
*.spercook.com
*.suitsplus.co.uk
*.tagessxhau.de
*.tradeisreal.com
*.unk.eu
*.valdesmusica.com
*.vbl.au
*.wpreview.pro
*.xn--dstermhle-q9af.de
*.xn--flge-buchen-uhb.de
*.xn--kchenmaschine-wob.de
*.xn--verdienstmglichkeit-z6b.de
*.zawameki.net
aberturasdg.com
adsforearn.com
aflrelations.com
amplofy.com
beidish.com
btbtt114.com
bubbleled.com
chateaudebeauregard.net
cosyhomesinteriors.com
darkdormneighbors.com
emilyatacklive.com
excavationcoffrageap.com
gardengreater.com
hopfarmauctionroom.co.uk
horoscopopersonal.com
indded.com.au
indianmuseum-calcutta.org
infoaha.com
jns.eu
jugueteandoperu.com
jzf.de
kirtonwindows.co.uk
litzonegaming-de.com
livefitness.de
livelorecompensa.info
made-lv.com
manualidades.de
mekonsportswear.com
metaav.cyou
nicknames.be
non-fungible.me
noses.ca
oopslist.com
pakistan.co.za
pcgamesyard.com
shalasol.com
silvercreekgolfcarts.com
spercook.com
suitsplus.co.uk
tagessxhau.de
tradeisreal.com
unk.eu
valdesmusica.com
vbl.au
wpreview.pro
xn--dstermhle-q9af.de
xn--flge-buchen-uhb.de
xn--kchenmaschine-wob.de
xn--verdienstmglichkeit-z6b.de
zawameki.net

Other certificates including the domain name jzf.de

(limited to 100 certificates)
polenporno.de
jzf.de
jzf.de
jzf.de
cariera.org
jzf.de
jzf.de
jru.de
grand-mal-anfall.de
fo2online.de
grand-mal-anfall.de
jzf.de
lohnsiegel.de

Certificate

The complete raw certificate details for jzf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275388217908891017963937123386861259522670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 21:24:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 21:24:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jzf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857153693940580523755974731051506044678646417997554282521918787193566008826000010909149435494699629709252076470816521586712644923467821811391853122309144119466211059418415297933012261573353736440521771829833870548910160310013593065340567201204183315511556041771468144696314198846602667442577309191791276712998611902551996791996486402783261078064578063576061135690061217184890024698362570880255414417315516279921481560398438458356603868388651984958155309118822316875074671034117696771324499200759902853504339211891666745106974959241181755756432459945867915017283422678297573088380527424631480684905395061335087959638040473841623032619724161050030514781577425191964920524559287831356669298751626811500301804377703424306498450022458775310537658462762147544375225507152435740271976077416564489064529488918433322633369532457729158856420840858813225127043832160879239607803857576724457411478145352072418218132286213117260432654551397503940032646064865668785219242842829780940738657408973017395742713825040832986738870633559060290078633604390930854686863528984966696398300537810413388176343384820207737989856174152460828915777879052447557979438595385620343950490401764572502507248440114956283200870666574198902865782261531813520772951008381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad65073e71f46a177d2a5f586ac8b50f68d39427
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1880 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aberturasdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adsforearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aflrelations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amplofy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beidish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btbtt114.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bubbleled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chateaudebeauregard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosyhomesinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkdormneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emilyatacklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excavationcoffrageap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardengreater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopfarmauctionroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horoscopopersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indded.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianmuseum-calcutta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infoaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jugueteandoperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jzf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirtonwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.litzonegaming-de.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livefitness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livelorecompensa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.made-lv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manualidades.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mekonsportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metaav.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicknames.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-fungible.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oopslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcgamesyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shalasol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvercreekgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spercook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitsplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagessxhau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradeisreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valdesmusica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vbl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpreview.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dstermhle-q9af.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flge-buchen-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kchenmaschine-wob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--verdienstmglichkeit-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zawameki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberturasdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsforearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflrelations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplofy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beidish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btbtt114.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubbleled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chateaudebeauregard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosyhomesinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkdormneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilyatacklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excavationcoffrageap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardengreater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopfarmauctionroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horoscopopersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indded.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianmuseum-calcutta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jugueteandoperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jzf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirtonwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litzonegaming-de.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livefitness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livelorecompensa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'made-lv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manualidades.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekonsportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaav.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicknames.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'non-fungible.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oopslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgamesyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shalasol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvercreekgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spercook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitsplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagessxhau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeisreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valdesmusica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vbl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpreview.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dstermhle-q9af.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flge-buchen-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kchenmaschine-wob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--verdienstmglichkeit-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zawameki.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d6beca5b80000040300483046022100c879db5980a82b03776b36e6def7a529c80854b8e4f00859cca87e93c25446ae022100ef11a032081991929a14d5d053250bb5708fbf88fa02fd2b56aeb40c36f1ad46007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d6beca56e0000040300473045022100acab966bfd971bb30b8808885d632a5cc964470da7ed1f3901f0bb5d0084448b02206d15b8bd1676041b0095f6d071d0a1a7fdb8bac735de4e84457101f6f2fe1834
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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