u.mailkit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number e0:b3:ae:8e:23:92:bd:22:06:66:d6:62:d0:26:7b:4a was issued on by Sectigo Limited.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=u.mailkit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e0:b3:ae:8e:23:92:bd:22:06:66:d6:62:d0:26:7b:4a
Serial Number (int): 298680032594178373760476111316376255306
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5e:ff:a3:50:a4:23:16:c4:49:06:b1:c1:43:bb:99:9c:75:78:70:70
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 46:8c:ff:ae:02:ff:0f:91:0a:b6:6e:45:9a:d5:26:ac:82:53:a4:74
Fingerprint (sha256): 59:f7:9b:c9:55:f7:37:f0:20:91:f2:46:d9:f9:1f:84:3c:9d:ca:3a:56:e3:6b:17:85:1b:e8:1e:9a:d3:94:9e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate u.mailkit.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for u.mailkit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

u.mailkit.com
u.akce.rent.cz
u.akce.svet-svitidel.cz
u.akcie.rent.sk
u.akcie.svet-svietidiel.sk
u.allianz.cz
u.centropol.cz
u.club.rossmann.cz
u.dedoma.ro
u.dedoma.sk
u.dine4fit.hu
u.dine4fit.pl
u.dobryemail.cz
u.e-kondomy.cz
u.email.bezvasport.cz
u.email.bezvasport.sk
u.emaildemos.com
u.homecredit.cz
u.homecredit.sk
u.info.nm.cz
u.kaloricketabulky.cz
u.kaloricketabulky.sk
u.kartavyhod.drmax.cz
u.ketodiet.cz
u.ketodiet.sk
u.kusmitea.cz
u.love.activate.cz
u.malfini.com
u.mesacnyvypis.sk
u.mesicnivypis.cz
u.mimilatky.cz
u.mnd.cz
u.naturamed.cz
u.naturamed.sk
u.news.3dden.com
u.news.etneteragroup.cz
u.newsletter.drmax.cz
u.newsletter.factcool.com
u.newsletter.rossmann.cz
u.nl.toner.shop
u.nl.tonerpartner.cz
u.nl.tonerpartner.hr
u.nl.tonerpartner.pl
u.nl.tonerpartner.ro
u.nl.tonerpartner.sk
u.nl.tonerpartners.hu
u.notino.at
u.notino.be
u.notino.bg
u.notino.ch
u.notino.co.uk
u.notino.cz
u.notino.de
u.notino.dk
u.notino.ee
u.notino.es
u.notino.fi
u.notino.fr
u.notino.gr
u.notino.hr
u.notino.hu
u.notino.ie
u.notino.it
u.notino.lt
u.notino.lv
u.notino.nl
u.notino.pl
u.notino.pt
u.notino.ro
u.notino.se
u.notino.si
u.notino.sk
u.notino.ua
u.novinky.volkswagen.cz
u.omnivery.com
u.pottenpannen.cz
u.pottenpannen.sk
u.pozvanky.nm.cz
u.prazirna.doubleshot.cz
u.ru.dine4fit.com
u.superlove.sk
u.tablycjakalorijnosti.com.ua

Other certificates including the domain name mailkit.com

(limited to 100 certificates)
t.mailkit.com
*.mailkit.com
t.mailkit.com
*.mailkit.com
t.mailkit.com
u.mailkit.com
mailkit.com
u.mailkit.com
u.mailkit.com
mailkit.com
t.mailkit.com
u.mailkit.com

Certificate

The complete raw certificate details for u.mailkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGcjC32JLs4oGwRmRSq9
QhHvCxRXiUoosMaZB3MGvkyGo811dKVKdXZlmxHszSUWOmFT1KXILQG4zbe9aVtJ
+K2hfNIZ3wLFZ6aXA7Z5T4bJVIzvSqND+t/B0JiTAH/JXirGScDMxMKsUDj3/Mm4
jQxnjRFFuqUr3mPPnzUvf4MEmDwqtxcHLp92JGk6P5jg4J1DtsIAvgX0QPNo+cyG
MnatvgixI+DwWKHyq54QvD2Pqfk1ZjKp/Y9cYLDO47rbEqV+de7DOjwNKeLJdgkl
3+Q9Vp2ScNTPjlkIaobPB23R7iuANhwxhaOC6IC7cgvldKnKaOOgMakNt7M67RiJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298680032594178373760476111316376255306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'u.mailkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20753940712433700840126440288149304003354474029868529457445881989701578374053253131867199976222589395802488805391711842359178093034405867070481658271228682267746402344982538340596313441682379931874655678253709934490016708863669652396654095586879184462110121595995702854401130967614384534756257811332271374832982751511779156986662828116900989198826330989497097351874826159168353763143107629145862638294379657861081997716614632635159765558447600843095053947408422520389590160267371689592073730744893322284410484638085781450183569476800734796460235367419439932842164338082910621964526147046121261503480427771408357558641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5effa350a42316c44906b1c143bb999c75787070
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001874675df2700000403004730450221008f1fa21faf04431eb7f72b39bc5ce47bbff7adf205cf524544657fc1832100e102204755a4d7f004927897e23573a98310f27a56b94b7b02b26aaf7580af84e75cc00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001874675e1160000040300473045022100f9feadfcd4e5afa66e6c87921243f4a1e2e5d539c1ba0fe5ce09bbc7b1a0a94d022032638774f9dbee5e695b4f493c198d85940d4b8049d8debce3828035088342c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1413 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mailkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akce.rent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akce.svet-svitidel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akcie.rent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akcie.svet-svietidiel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.allianz.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.club.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dedoma.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dedoma.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dine4fit.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dine4fit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dobryemail.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.e-kondomy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.email.bezvasport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.email.bezvasport.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.emaildemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.homecredit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.info.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kaloricketabulky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kaloricketabulky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kartavyhod.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ketodiet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ketodiet.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kusmitea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.love.activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.malfini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mesacnyvypis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mesicnivypis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mimilatky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mnd.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.naturamed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.naturamed.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.3dden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.etneteragroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.factcool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.toner.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.volkswagen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.omnivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pottenpannen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pottenpannen.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pozvanky.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.prazirna.doubleshot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ru.dine4fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.superlove.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.tablycjakalorijnosti.com.ua'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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