xn--ttenspender-thb.de
Issued by R3
About this certificate
This digital certificate with serial number 03:e2:ee:c4:b6:72:6b:1a:8e:06:b0:be:66:64:68:5f:3d:03 was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=xn--ttenspender-thb.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e2:ee:c4:b6:72:6b:1a:8e:06:b0:be:66:64:68:5f:3d:03Serial Number (int): 338558050373057620876612460152890251492611
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b4:86:de:32:e6:95:c2:7a:e0:30:90:1e:86:97:d4:f7:c5:1e:eb:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 55:46:f5:18:0a:a4:eb:52:b7:b6:ac:6f:55:52:ca:8d:03:7f:4d:7c
Fingerprint (sha256): 55:15:0d:23:c4:d9:29:1f:31:a8:ff:d0:4d:eb:cf:93:80:8c:47:28:a7:c3:43:36:aa:b5:e2:0d:e2:a2:66:81
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate xn--ttenspender-thb.de
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xn--ttenspender-thb.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.aitours.co.za
*.ambientewaterfeatures.co.uk
*.babykinderzimmer.de
*.computervraagbank.nl
*.damenfunkuhren.de
*.desoxythymidin.de
*.duval.es
*.elpatiopolitico.com
*.emotrasfusioni.org
*.finazaonline.it
*.g7.com.au
*.golfaccessories.com.au
*.hasenfreigehege.de
*.ijea.it
*.infantry.com.au
*.laserdruckertest.de
*.mercylink.net
*.mohairpullover.de
*.mundspreizer.de
*.mungbean.com.au
*.mycarfinance247.co.uk
*.pilds.de
*.purposes.org
*.sadhs.de
*.schlabberhosen.de
*.secretescaped.de
*.sigi.nl
*.sms-online.info
*.stahlschrottpreise.de
*.tatterlace.co.uk
*.teenieschollgirls.net
*.tickermaster.co.uk
*.tierheime-krefeld.de
*.tischuntersetzer.de
*.transcripts.org
*.trukcs.de
*.upload.pe
*.versandshopping.de
*.wwwscottsofstow.co.uk
*.wwwwundertax.de
*.xn--alkoholmessgert-elb.de
*.xn--benzoesure-w5a.de
*.xn--feinsprhsystem-msb.de
*.xn--interest-55a.de
*.xn--papedit-bxa.de
*.xn--schilddrsenszintigraphie-2sc.de
*.xn--sklavenvertrge-hib.de
*.xn--tiketbrse-57a.de
*.xn--ttenspender-thb.de
*.zuidcafe.be
aitours.co.za
ambientewaterfeatures.co.uk
babykinderzimmer.de
computervraagbank.nl
damenfunkuhren.de
desoxythymidin.de
duval.es
elpatiopolitico.com
emotrasfusioni.org
finazaonline.it
g7.com.au
golfaccessories.com.au
hasenfreigehege.de
ijea.it
infantry.com.au
laserdruckertest.de
mercylink.net
mohairpullover.de
mundspreizer.de
mungbean.com.au
mycarfinance247.co.uk
pilds.de
purposes.org
sadhs.de
schlabberhosen.de
secretescaped.de
sigi.nl
sms-online.info
stahlschrottpreise.de
tatterlace.co.uk
teenieschollgirls.net
tickermaster.co.uk
tierheime-krefeld.de
tischuntersetzer.de
transcripts.org
trukcs.de
upload.pe
versandshopping.de
wwwscottsofstow.co.uk
wwwwundertax.de
xn--alkoholmessgert-elb.de
xn--benzoesure-w5a.de
xn--feinsprhsystem-msb.de
xn--interest-55a.de
xn--papedit-bxa.de
xn--schilddrsenszintigraphie-2sc.de
xn--sklavenvertrge-hib.de
xn--tiketbrse-57a.de
xn--ttenspender-thb.de
zuidcafe.be
*.ambientewaterfeatures.co.uk
*.babykinderzimmer.de
*.computervraagbank.nl
*.damenfunkuhren.de
*.desoxythymidin.de
*.duval.es
*.elpatiopolitico.com
*.emotrasfusioni.org
*.finazaonline.it
*.g7.com.au
*.golfaccessories.com.au
*.hasenfreigehege.de
*.ijea.it
*.infantry.com.au
*.laserdruckertest.de
*.mercylink.net
*.mohairpullover.de
*.mundspreizer.de
*.mungbean.com.au
*.mycarfinance247.co.uk
*.pilds.de
*.purposes.org
*.sadhs.de
*.schlabberhosen.de
*.secretescaped.de
*.sigi.nl
*.sms-online.info
*.stahlschrottpreise.de
*.tatterlace.co.uk
*.teenieschollgirls.net
*.tickermaster.co.uk
*.tierheime-krefeld.de
*.tischuntersetzer.de
*.transcripts.org
*.trukcs.de
*.upload.pe
*.versandshopping.de
*.wwwscottsofstow.co.uk
*.wwwwundertax.de
*.xn--alkoholmessgert-elb.de
*.xn--benzoesure-w5a.de
*.xn--feinsprhsystem-msb.de
*.xn--interest-55a.de
*.xn--papedit-bxa.de
*.xn--schilddrsenszintigraphie-2sc.de
*.xn--sklavenvertrge-hib.de
*.xn--tiketbrse-57a.de
*.xn--ttenspender-thb.de
*.zuidcafe.be
aitours.co.za
ambientewaterfeatures.co.uk
babykinderzimmer.de
computervraagbank.nl
damenfunkuhren.de
desoxythymidin.de
duval.es
elpatiopolitico.com
emotrasfusioni.org
finazaonline.it
g7.com.au
golfaccessories.com.au
hasenfreigehege.de
ijea.it
infantry.com.au
laserdruckertest.de
mercylink.net
mohairpullover.de
mundspreizer.de
mungbean.com.au
mycarfinance247.co.uk
pilds.de
purposes.org
sadhs.de
schlabberhosen.de
secretescaped.de
sigi.nl
sms-online.info
stahlschrottpreise.de
tatterlace.co.uk
teenieschollgirls.net
tickermaster.co.uk
tierheime-krefeld.de
tischuntersetzer.de
transcripts.org
trukcs.de
upload.pe
versandshopping.de
wwwscottsofstow.co.uk
wwwwundertax.de
xn--alkoholmessgert-elb.de
xn--benzoesure-w5a.de
xn--feinsprhsystem-msb.de
xn--interest-55a.de
xn--papedit-bxa.de
xn--schilddrsenszintigraphie-2sc.de
xn--sklavenvertrge-hib.de
xn--tiketbrse-57a.de
xn--ttenspender-thb.de
zuidcafe.be
Other certificates including the domain name xn--ttenspender-thb.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for xn--ttenspender-thb.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINuTCCDKGgAwIBAgISA+LuxLZyaxqOBrC+ZmRoXz0DMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTIxMTIyNTBaFw0yNDAyMTAxMTIyNDlaMCExHzAdBgNVBAMT FnhuLS10dGVuc3BlbmRlci10aGIuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQDjNhAPAcjCVgbyv5hzxlnEIuRWfvcRjr80WX6E4ji+IsvX+X1roNH8 laTYR/IV4GGl31TIEXoLghaXeoGxNPVlSnnmL9KiAD5y3P3ly9LUyZHW8/V+k2ZU tCLksYcO01yWRR4lsa4crwHjJGr6nyPt0x3kNKKNTAcnTWTRaXW7gjAXPLLNaGDZ jQC+4IhJFI3o6Y+j/cCAWHzThTSa5WRs7IGZrevz2qx8bBbZdOM4j4lWmXXY+irW Jx39iTg4r+4GEnxuAfkBBIb547cFi0Vjgyss9SKlkxIPssKQpSCEn2kdSTR+A5XR XK6U6DoGMKoQM0xf5Z7KcoBlJwsQALl7GiSx9juPYBOpfHdhNOPVrrFIIQ3CCO8X xudSxg/IVoOOWoHy3kHMNfLPqgkJl+dDejr9wfVQnVFr42m40dto4ef7yoQlBiLP YTopNJ6OrHVUwzLxLZQ0ONMjq7Ha1jWvMnk7G3SUfxZTjwKAsJu5Cf07K9a/yOH/ EY1/8a4HjR6NDtzUdKj1KsxwjfvDdcH6gIGjiXAY+CXeqtHwm+dhjJRyICyfxcUl z6R3uePob5GxaUaW2nf8c8xU/d2toeb32PCvNMcFid7VcZPeSE+nne5i1ZwehvVf FuRv3HyeKGcWmpXYoTUC+1OYucxTl9461PX6Trv2YBN8pYM3GXTucwIDAQABo4IJ 2DCCCdQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS0ht4y5pXCeuAwkB6Gl9T3xR7r yTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCB98GA1UdEQSCB9YwggfSgg8qLmFp dG91cnMuY28uemGCHSouYW1iaWVudGV3YXRlcmZlYXR1cmVzLmNvLnVrghUqLmJh YnlraW5kZXJ6aW1tZXIuZGWCFiouY29tcHV0ZXJ2cmFhZ2JhbmsubmyCEyouZGFt ZW5mdW5rdWhyZW4uZGWCEyouZGVzb3h5dGh5bWlkaW4uZGWCCiouZHV2YWwuZXOC FSouZWxwYXRpb3BvbGl0aWNvLmNvbYIUKi5lbW90cmFzZnVzaW9uaS5vcmeCESou ZmluYXphb25saW5lLml0ggsqLmc3LmNvbS5hdYIYKi5nb2xmYWNjZXNzb3JpZXMu Y29tLmF1ghQqLmhhc2VuZnJlaWdlaGVnZS5kZYIJKi5pamVhLml0ghEqLmluZmFu dHJ5LmNvbS5hdYIVKi5sYXNlcmRydWNrZXJ0ZXN0LmRlgg8qLm1lcmN5bGluay5u ZXSCEyoubW9oYWlycHVsbG92ZXIuZGWCESoubXVuZHNwcmVpemVyLmRlghEqLm11 bmdiZWFuLmNvbS5hdYIXKi5teWNhcmZpbmFuY2UyNDcuY28udWuCCioucGlsZHMu ZGWCDioucHVycG9zZXMub3JnggoqLnNhZGhzLmRlghMqLnNjaGxhYmJlcmhvc2Vu LmRlghIqLnNlY3JldGVzY2FwZWQuZGWCCSouc2lnaS5ubIIRKi5zbXMtb25saW5l LmluZm+CFyouc3RhaGxzY2hyb3R0cHJlaXNlLmRlghIqLnRhdHRlcmxhY2UuY28u dWuCFyoudGVlbmllc2Nob2xsZ2lybHMubmV0ghQqLnRpY2tlcm1hc3Rlci5jby51 a4IWKi50aWVyaGVpbWUta3JlZmVsZC5kZYIVKi50aXNjaHVudGVyc2V0emVyLmRl ghEqLnRyYW5zY3JpcHRzLm9yZ4ILKi50cnVrY3MuZGWCCyoudXBsb2FkLnBlghQq LnZlcnNhbmRzaG9wcGluZy5kZYIXKi53d3dzY290dHNvZnN0b3cuY28udWuCESou d3d3d3VuZGVydGF4LmRlghwqLnhuLS1hbGtvaG9sbWVzc2dlcnQtZWxiLmRlghcq LnhuLS1iZW56b2VzdXJlLXc1YS5kZYIbKi54bi0tZmVpbnNwcmhzeXN0ZW0tbXNi LmRlghUqLnhuLS1pbnRlcmVzdC01NWEuZGWCFCoueG4tLXBhcGVkaXQtYnhhLmRl giUqLnhuLS1zY2hpbGRkcnNlbnN6aW50aWdyYXBoaWUtMnNjLmRlghsqLnhuLS1z a2xhdmVudmVydHJnZS1oaWIuZGWCFioueG4tLXRpa2V0YnJzZS01N2EuZGWCGCou eG4tLXR0ZW5zcGVuZGVyLXRoYi5kZYINKi56dWlkY2FmZS5iZYINYWl0b3Vycy5j by56YYIbYW1iaWVudGV3YXRlcmZlYXR1cmVzLmNvLnVrghNiYWJ5a2luZGVyemlt bWVyLmRlghRjb21wdXRlcnZyYWFnYmFuay5ubIIRZGFtZW5mdW5rdWhyZW4uZGWC EWRlc294eXRoeW1pZGluLmRlgghkdXZhbC5lc4ITZWxwYXRpb3BvbGl0aWNvLmNv bYISZW1vdHJhc2Z1c2lvbmkub3Jngg9maW5hemFvbmxpbmUuaXSCCWc3LmNvbS5h dYIWZ29sZmFjY2Vzc29yaWVzLmNvbS5hdYISaGFzZW5mcmVpZ2VoZWdlLmRlggdp amVhLml0gg9pbmZhbnRyeS5jb20uYXWCE2xhc2VyZHJ1Y2tlcnRlc3QuZGWCDW1l cmN5bGluay5uZXSCEW1vaGFpcnB1bGxvdmVyLmRlgg9tdW5kc3ByZWl6ZXIuZGWC D211bmdiZWFuLmNvbS5hdYIVbXljYXJmaW5hbmNlMjQ3LmNvLnVrgghwaWxkcy5k ZYIMcHVycG9zZXMub3JngghzYWRocy5kZYIRc2NobGFiYmVyaG9zZW4uZGWCEHNl Y3JldGVzY2FwZWQuZGWCB3NpZ2kubmyCD3Ntcy1vbmxpbmUuaW5mb4IVc3RhaGxz Y2hyb3R0cHJlaXNlLmRlghB0YXR0ZXJsYWNlLmNvLnVrghV0ZWVuaWVzY2hvbGxn aXJscy5uZXSCEnRpY2tlcm1hc3Rlci5jby51a4IUdGllcmhlaW1lLWtyZWZlbGQu ZGWCE3Rpc2NodW50ZXJzZXR6ZXIuZGWCD3RyYW5zY3JpcHRzLm9yZ4IJdHJ1a2Nz LmRlggl1cGxvYWQucGWCEnZlcnNhbmRzaG9wcGluZy5kZYIVd3d3c2NvdHRzb2Zz dG93LmNvLnVrgg93d3d3dW5kZXJ0YXguZGWCGnhuLS1hbGtvaG9sbWVzc2dlcnQt ZWxiLmRlghV4bi0tYmVuem9lc3VyZS13NWEuZGWCGXhuLS1mZWluc3ByaHN5c3Rl bS1tc2IuZGWCE3huLS1pbnRlcmVzdC01NWEuZGWCEnhuLS1wYXBlZGl0LWJ4YS5k ZYIjeG4tLXNjaGlsZGRyc2Vuc3ppbnRpZ3JhcGhpZS0yc2MuZGWCGXhuLS1za2xh dmVudmVydHJnZS1oaWIuZGWCFHhuLS10aWtldGJyc2UtNTdhLmRlghZ4bi0tdHRl bnNwZW5kZXItdGhiLmRlggt6dWlkY2FmZS5iZTATBgNVHSAEDDAKMAgGBmeBDAEC ATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D 9Me9AA0tcm/h+tQXAAABi8N8FM8AAAQDAEcwRQIgH0PglXv9ncp/us9OEHIXOtaK SOQBZC3HqIfzGdC7puECIQDMoTqbeegUGLr7sLzqeMMt0wBBotgBoiAwamkvq82V ogB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi8N8FM0AAAQD AEcwRQIhAMu2j/ekelBZkpNZcLRqqH9OOqJm5fYk5lwkL9ACDdmrAiBoVl0sSJgO XDtUieg7Y0Gkz66LSQ6QjJy2jke9zyGAajANBgkqhkiG9w0BAQsFAAOCAQEAtA5P zvjuyEpZjn9W7+fTPjkD0oo5whpq75gl7jwdnUSxNtmXAzD1TIRNnP3ClUtwfVeL 30kwM9zOynlAbk42K4Pnr77aP3+aQLcm76m2mq/UCiUWLjIsExs+OT7axflK8YHE EgLfXubHxB9chiNk/21EWtvgLsZCeL7bosU+uSNJTUdCQ9e2Kw41Cd1lwmFVUnhC Mq7ij25e8Zc9x7zkxIfVTxN6NeNyO21gel9Ui4qx3p9lSgFGLxmbdU2IZ/IDmCtS dHxNlsUJzQQr8TSOgcJI2BUz4VDVPvmCFWRLifRLTVA2P0UA2919Voi90aOOq/Yc cxO+TD2drfaiOFJvxg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4zYQDwHIwlYG8r+Yc8ZZ xCLkVn73EY6/NFl+hOI4viLL1/l9a6DR/JWk2EfyFeBhpd9UyBF6C4IWl3qBsTT1 ZUp55i/SogA+ctz95cvS1MmR1vP1fpNmVLQi5LGHDtNclkUeJbGuHK8B4yRq+p8j 7dMd5DSijUwHJ01k0Wl1u4IwFzyyzWhg2Y0AvuCISRSN6OmPo/3AgFh804U0muVk bOyBma3r89qsfGwW2XTjOI+JVpl12Poq1icd/Yk4OK/uBhJ8bgH5AQSG+eO3BYtF Y4MrLPUipZMSD7LCkKUghJ9pHUk0fgOV0VyulOg6BjCqEDNMX+WeynKAZScLEAC5 exoksfY7j2ATqXx3YTTj1a6xSCENwgjvF8bnUsYPyFaDjlqB8t5BzDXyz6oJCZfn Q3o6/cH1UJ1Ra+NpuNHbaOHn+8qEJQYiz2E6KTSejqx1VMMy8S2UNDjTI6ux2tY1 rzJ5Oxt0lH8WU48CgLCbuQn9OyvWv8jh/xGNf/GuB40ejQ7c1HSo9SrMcI37w3XB +oCBo4lwGPgl3qrR8JvnYYyUciAsn8XFJc+kd7nj6G+RsWlGltp3/HPMVP3draHm 99jwrzTHBYne1XGT3khPp53uYtWcHob1Xxbkb9x8nihnFpqV2KE1AvtTmLnMU5fe OtT1+k679mATfKWDNxl07nMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 338558050373057620876612460152890251492611 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 11:22:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 11:22:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--ttenspender-thb.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926940753017200161826013691578723668436144529374393870981766171897597419884214474975734474574263162842522923815524823503731116569338674795726608231580308048959604995802548914862076958997603490601356876630402105716035032443213326668123096034422488975247723196490799971584064449498684210754369138739847809007061895952503889306195362079529021654105110188403371084926764953705726100328859666683180679547269379874686874567127655108114945077598704895424556321949758800974560491545144539468202670293338783777960108419116176493768342122452658934797778386114735813506194376281874018934373447114741967195397527542236270618239281428959976623927672731721319402344824977245449297414338020701735525733347534826829536224342989281316179777548505908220826803724803464811579240878671125107812582925611406022217119095481622673909449979029320556942516776627913095665734672627969441707690309737236756639137542479249071742183963350579450143248110291392628599621723472518523565701652055059179358343202270480928014225014524847086707920995284399623072419728420306296901340089192073907463758797027429890291831461313258332030275293107769612205895490698220853785440186871489957728375313423177375584176171204343239041185817869445413233053141865814830982593048179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b486de32e695c27ae030901e8697d4f7c51eebc9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2006 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aitours.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambientewaterfeatures.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babykinderzimmer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computervraagbank.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damenfunkuhren.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desoxythymidin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duval.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpatiopolitico.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emotrasfusioni.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finazaonline.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g7.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfaccessories.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasenfreigehege.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijea.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infantry.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserdruckertest.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercylink.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mohairpullover.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundspreizer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mungbean.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycarfinance247.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilds.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purposes.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sadhs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlabberhosen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secretescaped.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigi.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sms-online.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stahlschrottpreise.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tatterlace.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teenieschollgirls.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tickermaster.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierheime-krefeld.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tischuntersetzer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transcripts.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trukcs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upload.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versandshopping.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwscottsofstow.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwwundertax.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--alkoholmessgert-elb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--benzoesure-w5a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--feinsprhsystem-msb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--interest-55a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--papedit-bxa.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schilddrsenszintigraphie-2sc.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sklavenvertrge-hib.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tiketbrse-57a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ttenspender-thb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuidcafe.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aitours.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambientewaterfeatures.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babykinderzimmer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computervraagbank.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damenfunkuhren.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desoxythymidin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duval.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpatiopolitico.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emotrasfusioni.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finazaonline.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfaccessories.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasenfreigehege.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijea.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infantry.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserdruckertest.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercylink.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohairpullover.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundspreizer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mungbean.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycarfinance247.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilds.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purposes.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadhs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlabberhosen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretescaped.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigi.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-online.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stahlschrottpreise.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatterlace.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenieschollgirls.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickermaster.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierheime-krefeld.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tischuntersetzer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcripts.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trukcs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versandshopping.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwscottsofstow.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwundertax.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--alkoholmessgert-elb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--benzoesure-w5a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--feinsprhsystem-msb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--interest-55a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--papedit-bxa.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schilddrsenszintigraphie-2sc.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sklavenvertrge-hib.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tiketbrse-57a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ttenspender-thb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuidcafe.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc37c14cf000004030047304502201f43e0957bfd9dca7fbacf4e1072173ad68a48e401642dc7a887f319d0bba6e1022100cca13a9b79e81418bafbb0bcea78c32dd30041a2d801a220306a692fabcd95a2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc37c14cd0000040300473045022100cbb68ff7a47a505992935970b46aa87f4e3aa266e5f624e65c242fd0020dd9ab022068565d2c48980e5c3b5489e83b6341a4cfae8b490e908c9cb68e47bdcf21806a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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