cannabisanbau.de

Issued by R3

About this certificate

This digital certificate with serial number 04:0f:73:0a:61:05:89:49:c3:f2:68:29:5c:7f:f1:40:a4:11 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cannabisanbau.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0f:73:0a:61:05:89:49:c3:f2:68:29:5c:7f:f1:40:a4:11
Serial Number (int): 353706294341171275202153231049075942532113
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 95:0a:6f:d4:dc:31:ab:c5:43:e5:d7:3f:dc:39:db:7a:93:a3:54:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:94:1e:51:87:96:e3:de:f5:d7:2a:fe:70:9f:87:b3:fe:45:12:03
Fingerprint (sha256): 53:e8:5c:d8:51:aa:1e:b3:a8:e2:9f:d2:e0:8d:53:a3:8e:33:64:94:b9:1c:ea:4c:76:ee:b2:8a:e7:21:e5:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cannabisanbau.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cannabisanbau.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acessarlink.online
*.billiegr-telefonieren.de
*.boilingspringspropertymanagement.com
*.cannabisanbau.de
*.cassyphotographie.com
*.centerpieces.de
*.collect.com.au
*.dcu.de
*.donsociety.com
*.earthtomeekus.com
*.emeraldtechmpl.com
*.eolsage.co.uk
*.erp20000.com
*.federbestimmung.de
*.freegirlshome.com
*.funexio.com
*.gilona.com
*.gioov.com
*.giveawaypicker.net
*.goodfoodafrica.com
*.haloprofesi.com
*.ilgimezat.com
*.khalijee.com
*.khobuncaythai.com
*.kostenlosespielespielen.de
*.ladysblog.org
*.lamadamemr.com
*.legeorgebistro.com
*.maps4.me
*.meckel-divertikel.de
*.merokhabar.com
*.moemoerabu.net
*.morgansfund.org
*.morph3sec.com
*.myonlinetour.com
*.orixi.me
*.paehl-info.de
*.readingglasses.de
*.selves.org
*.smiledentistanbul.com
*.spiritualcandleshop.com
*.targetpanik.de
*.tickler.com.au
*.wettreronline.de
*.whitefly.org
*.wudo.net
*.xn--elektrogerteversicherung-zbc.de
*.xn--hochknigsburg-mmb.de
*.zafiro.net
*.zigwedding.com
acessarlink.online
billiegr-telefonieren.de
boilingspringspropertymanagement.com
cannabisanbau.de
cassyphotographie.com
centerpieces.de
collect.com.au
dcu.de
donsociety.com
earthtomeekus.com
emeraldtechmpl.com
eolsage.co.uk
erp20000.com
federbestimmung.de
freegirlshome.com
funexio.com
gilona.com
gioov.com
giveawaypicker.net
goodfoodafrica.com
haloprofesi.com
ilgimezat.com
khalijee.com
khobuncaythai.com
kostenlosespielespielen.de
ladysblog.org
lamadamemr.com
legeorgebistro.com
maps4.me
meckel-divertikel.de
merokhabar.com
moemoerabu.net
morgansfund.org
morph3sec.com
myonlinetour.com
orixi.me
paehl-info.de
readingglasses.de
selves.org
smiledentistanbul.com
spiritualcandleshop.com
targetpanik.de
tickler.com.au
wettreronline.de
whitefly.org
wudo.net
xn--elektrogerteversicherung-zbc.de
xn--hochknigsburg-mmb.de
zafiro.net
zigwedding.com

Other certificates including the domain name cannabisanbau.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for cannabisanbau.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINPjCCDCagAwIBAgISBA9zCmEFiUnD8mgpXH/xQKQRMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA2MDEyMDA5NDZaFw0yNDA4MzAyMDA5NDVaMBsxGTAXBgNVBAMT
EGNhbm5hYmlzYW5iYXUuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQC3CtU9NVM3Vu0iB0gc0UpkczO9JDyLOlHmNZGq1xtwnEnHsBis4AHpOCvmwF1V
Jan5n2iQ2dEeQsZo5MKY52L8HEuJjR3k6q9awXQ2Q225Bh4tgDEnPPL5klWTyYvC
sHW9kQKppsojj5Hsl8cuHPvUDGurfPQn84MlQNRWxiMbm3g5xtxqDTSPiLUarVjT
EhPxK63MbaWlvm3s2UAR+7EMd6FkCUDjXtJlZ72Va+19snKVz6UvcdUtfFcR7Hl+
aebKbIU4OYaSGPecgNBk+Zk0GqHtqO9y/qDs0OsGiKd+LL8bo5XahBg2Mzuh0zm8
OoPvSg9Z0qqOMEiby/y1ctr+HzhDCZ/xGj2eYawDSVl98FCpneojxpI+eCPI7+ir
+9KPQSb69RIi0PEinsbARD6TEZGnjrb2+HLp8zi85vxkXUAR1SFCnC4wIivPDdmn
+mfbFxj5atlXcXHKJuT8QCm8hVaFvYLH2rzSOAhDH6VFGxx0DnIe0uEZU5Bxv2HU
7coGlrnaVemY1I+FgeWgE2Xxe6HmzrXKb6vsuXnbZa+th+zpJFmqVpVRwVPlo4HY
x6D8OpvQsFooIw3zcIVHYxNWkagmQKBb2Bs2Pz+vpYreH7VwmI1/NVziKUWOMvuI
M0IYMWrAgzqtSmpxvZYE/qvIE/7WEh4rvhVLEJDlgj5x+QIDAQABo4IJYzCCCV8w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSVCm/U3DGrxUPl1z/cOdt6k6NUMTAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCB2kGA1UdEQSCB2AwggdcghQqLmFjZXNzYXJs
aW5rLm9ubGluZYIaKi5iaWxsaWVnci10ZWxlZm9uaWVyZW4uZGWCJiouYm9pbGlu
Z3NwcmluZ3Nwcm9wZXJ0eW1hbmFnZW1lbnQuY29tghIqLmNhbm5hYmlzYW5iYXUu
ZGWCFyouY2Fzc3lwaG90b2dyYXBoaWUuY29tghEqLmNlbnRlcnBpZWNlcy5kZYIQ
Ki5jb2xsZWN0LmNvbS5hdYIIKi5kY3UuZGWCECouZG9uc29jaWV0eS5jb22CEyou
ZWFydGh0b21lZWt1cy5jb22CFCouZW1lcmFsZHRlY2htcGwuY29tgg8qLmVvbHNh
Z2UuY28udWuCDiouZXJwMjAwMDAuY29tghQqLmZlZGVyYmVzdGltbXVuZy5kZYIT
Ki5mcmVlZ2lybHNob21lLmNvbYINKi5mdW5leGlvLmNvbYIMKi5naWxvbmEuY29t
ggsqLmdpb292LmNvbYIUKi5naXZlYXdheXBpY2tlci5uZXSCFCouZ29vZGZvb2Rh
ZnJpY2EuY29tghEqLmhhbG9wcm9mZXNpLmNvbYIPKi5pbGdpbWV6YXQuY29tgg4q
LmtoYWxpamVlLmNvbYITKi5raG9idW5jYXl0aGFpLmNvbYIcKi5rb3N0ZW5sb3Nl
c3BpZWxlc3BpZWxlbi5kZYIPKi5sYWR5c2Jsb2cub3JnghAqLmxhbWFkYW1lbXIu
Y29tghQqLmxlZ2VvcmdlYmlzdHJvLmNvbYIKKi5tYXBzNC5tZYIWKi5tZWNrZWwt
ZGl2ZXJ0aWtlbC5kZYIQKi5tZXJva2hhYmFyLmNvbYIQKi5tb2Vtb2VyYWJ1Lm5l
dIIRKi5tb3JnYW5zZnVuZC5vcmeCDyoubW9ycGgzc2VjLmNvbYISKi5teW9ubGlu
ZXRvdXIuY29tggoqLm9yaXhpLm1lgg8qLnBhZWhsLWluZm8uZGWCEyoucmVhZGlu
Z2dsYXNzZXMuZGWCDCouc2VsdmVzLm9yZ4IXKi5zbWlsZWRlbnRpc3RhbmJ1bC5j
b22CGSouc3Bpcml0dWFsY2FuZGxlc2hvcC5jb22CECoudGFyZ2V0cGFuaWsuZGWC
ECoudGlja2xlci5jb20uYXWCEioud2V0dHJlcm9ubGluZS5kZYIOKi53aGl0ZWZs
eS5vcmeCCioud3Vkby5uZXSCJSoueG4tLWVsZWt0cm9nZXJ0ZXZlcnNpY2hlcnVu
Zy16YmMuZGWCGioueG4tLWhvY2hrbmlnc2J1cmctbW1iLmRlggwqLnphZmlyby5u
ZXSCECouemlnd2VkZGluZy5jb22CEmFjZXNzYXJsaW5rLm9ubGluZYIYYmlsbGll
Z3ItdGVsZWZvbmllcmVuLmRlgiRib2lsaW5nc3ByaW5nc3Byb3BlcnR5bWFuYWdl
bWVudC5jb22CEGNhbm5hYmlzYW5iYXUuZGWCFWNhc3N5cGhvdG9ncmFwaGllLmNv
bYIPY2VudGVycGllY2VzLmRlgg5jb2xsZWN0LmNvbS5hdYIGZGN1LmRlgg5kb25z
b2NpZXR5LmNvbYIRZWFydGh0b21lZWt1cy5jb22CEmVtZXJhbGR0ZWNobXBsLmNv
bYINZW9sc2FnZS5jby51a4IMZXJwMjAwMDAuY29tghJmZWRlcmJlc3RpbW11bmcu
ZGWCEWZyZWVnaXJsc2hvbWUuY29tggtmdW5leGlvLmNvbYIKZ2lsb25hLmNvbYIJ
Z2lvb3YuY29tghJnaXZlYXdheXBpY2tlci5uZXSCEmdvb2Rmb29kYWZyaWNhLmNv
bYIPaGFsb3Byb2Zlc2kuY29tgg1pbGdpbWV6YXQuY29tggxraGFsaWplZS5jb22C
EWtob2J1bmNheXRoYWkuY29tghprb3N0ZW5sb3Nlc3BpZWxlc3BpZWxlbi5kZYIN
bGFkeXNibG9nLm9yZ4IObGFtYWRhbWVtci5jb22CEmxlZ2VvcmdlYmlzdHJvLmNv
bYIIbWFwczQubWWCFG1lY2tlbC1kaXZlcnRpa2VsLmRlgg5tZXJva2hhYmFyLmNv
bYIObW9lbW9lcmFidS5uZXSCD21vcmdhbnNmdW5kLm9yZ4INbW9ycGgzc2VjLmNv
bYIQbXlvbmxpbmV0b3VyLmNvbYIIb3JpeGkubWWCDXBhZWhsLWluZm8uZGWCEXJl
YWRpbmdnbGFzc2VzLmRlggpzZWx2ZXMub3JnghVzbWlsZWRlbnRpc3RhbmJ1bC5j
b22CF3NwaXJpdHVhbGNhbmRsZXNob3AuY29tgg50YXJnZXRwYW5pay5kZYIOdGlj
a2xlci5jb20uYXWCEHdldHRyZXJvbmxpbmUuZGWCDHdoaXRlZmx5Lm9yZ4IId3Vk
by5uZXSCI3huLS1lbGVrdHJvZ2VydGV2ZXJzaWNoZXJ1bmctemJjLmRlghh4bi0t
aG9jaGtuaWdzYnVyZy1tbWIuZGWCCnphZmlyby5uZXSCDnppZ3dlZGRpbmcuY29t
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA
SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGP1aMXLwAABAMARzBF
AiAU0d6SaqISzbrqPtDREeE3t7tGLbJjBl1znmhkRmYmGAIhAOD/yzZdkHxnpnE4
yUblBHeKa8vGQa1S7Cy6k2/fYk4OAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7D
UUhZRnEftZsAAAGP1aMXKQAABAMASDBGAiEA5EbfumkF7oa+GPZQs1uTeZbuRO63
6URM8CJbMyLYYIoCIQCOlPRWg1CWovZAAou+BXNdYyjHupCwrqc7aPXP1TkxMjAN
BgkqhkiG9w0BAQsFAAOCAQEACsu6Rj773SjaTKsJuCx2FayPx74dJOFkE78KrI6f
MuiT6WzdZBAnDW2OMO+Q+RF2XBHRJNsagCH+6QOoM/a/0qhhXyME8Go4Lbub44FJ
Qq859Qrp0TBA+xSMjaSLvqHT0C2NifMW1AlPh7+eNFeoUoT6ASSfU3Q4ZfpYZ04q
C7yC7Fm43c97msmdlNaG1i3H83LnXTwxqcRM1MIeVapYuha85PycHLta3RLfnRLq
uhcnm9cfj4KPH3GS0H5KR85+PFwfeQ0aLbWitqws4tj4GUDXjpTp+SklbMvlN8df
qczYX/2hUmGg++zxZ7b7C58Wn7ekBy+lnBPXmQnra76xag==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353706294341171275202153231049075942532113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 20:09:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-30 20:09:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cannabisanbau.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746747499769076302319302992342383175230372002336296330442370534961295522757692775842806154301697098469812335797029658223394621103412585006432684072216245581750313489832973935602266593377928947113445807480954147062332103565206440688723490735901209252590144800004743289366371786141627950972633262246068427927178545887513545489541869934787852207693565535454163917514243717161615728025809171272383247845145379843919729002147698871973130344709803936782224309709925892452914832095987313907442172485336821708465277107867459285049340074544950805079819215120305053091547115381357938116109031859131917061356085676185513421310054933894325009395693449470762921384179953289638136217320334902485929334469078690056877687608019902492695186815880571282587519951409410447235415398747857699053270046816800119237027005045591375801238342769481920879269469472986919932189119184710420303492209520613306913195894698080052007933932509271788426417235019829364974990844084117302296601402847396324699690865006433430548449625649986528401730642242205796270932088904305840976985374393742619850304658176775061354176413782305713505122411763869956421512185224469504547968070358937382108979728432713842539615820709533270785099800666907746688011083347819476635568992761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							950a6fd4dc31abc543e5d73fdc39db7a93a35431
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acessarlink.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billiegr-telefonieren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boilingspringspropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannabisanbau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cassyphotographie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerpieces.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthtomeekus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emeraldtechmpl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eolsage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erp20000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.federbestimmung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freegirlshome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funexio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gilona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gioov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giveawaypicker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodfoodafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haloprofesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilgimezat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khalijee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khobuncaythai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kostenlosespielespielen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladysblog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamadamemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legeorgebistro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maps4.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meckel-divertikel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merokhabar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moemoerabu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgansfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morph3sec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myonlinetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orixi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paehl-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readingglasses.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smiledentistanbul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritualcandleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.targetpanik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tickler.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wettreronline.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitefly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wudo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--elektrogerteversicherung-zbc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hochknigsburg-mmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zafiro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acessarlink.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billiegr-telefonieren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boilingspringspropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisanbau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassyphotographie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerpieces.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthtomeekus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeraldtechmpl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eolsage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp20000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federbestimmung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freegirlshome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funexio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveawaypicker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfoodafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haloprofesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilgimezat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khalijee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khobuncaythai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostenlosespielespielen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladysblog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamadamemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legeorgebistro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps4.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meckel-divertikel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merokhabar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moemoerabu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgansfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morph3sec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myonlinetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orixi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paehl-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingglasses.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiledentistanbul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualcandleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targetpanik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickler.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wettreronline.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitefly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wudo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--elektrogerteversicherung-zbc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hochknigsburg-mmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zafiro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zigwedding.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fd5a3172f0000040300473045022014d1de926aa212cdbaea3ed0d111e137b7bb462db263065d739e686446662618022100e0ffcb365d907c67a67138c946e504778a6bcbc641ad52ec2cba936fdf624e0e007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fd5a317290000040300483046022100e446dfba6905ee86be18f650b35b937996ee44eeb7e9444cf0225b3322d8608a0221008e94f456835096a2f640028bbe05735d6328c7ba90b0aea73b68f5cfd5393132
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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