pzpz.fun

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:b4:29:a7:ca:98:b7:3b:29:c2:77:95:83:1e:62:c4:cd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pzpz.fun

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:b4:29:a7:ca:98:b7:3b:29:c2:77:95:83:1e:62:c4:cd
Serial Number (int): 343244103182932211828155202062581426734285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:46:50:4f:33:db:13:98:e7:a1:d1:28:dc:7a:15:54:e1:12:6a:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:7a:5c:7f:a6:cb:05:bb:43:f7:b0:66:65:49:ce:36:16:d6:c7:31
Fingerprint (sha256): 5b:ec:48:27:e7:d4:bd:f9:f8:ad:2a:ea:7b:3e:08:3b:a8:3a:d6:5d:96:01:b3:4a:f3:8a:e3:a2:11:66:89:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pzpz.fun

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pzpz.fun

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.affinitywayer.co.uk
*.alpcanogrenciyurtlari.com
*.altstake.io
*.ariasalonsyr.com
*.blocktheory.net
*.breadmakers.com.au
*.consumerrights.co.za
*.denhag.com
*.dmenz.de
*.doppelschwert.de
*.edietreports.com
*.email365.org
*.equilibrio.es
*.euthyreose.de
*.exotiquecuisine.com
*.fixedagent.com.au
*.fixtwitter.com
*.flags4cash.com
*.footassylum.com
*.gallenblasenpolypen.de
*.gesuundheit.de
*.grefe.eu
*.jbftransportllc.com
*.jenniferwatkinsphotography.com
*.kashanya.com
*.krankenversicherungde.de
*.migreene.de
*.mirtilhos.eu
*.mmsg900132.com
*.myelolipom.de
*.nerologie.de
*.netdkotor.de
*.nikki-todd-catering.co.uk
*.opalandmarigold.com
*.pills247.net
*.pilza.de
*.polontv.pl
*.psevenmedicaldiagnostics.com
*.pzpz.fun
*.rotor-syndrom.de
*.schwellenpotential.de
*.sistemadatapro.org
*.steuererklae4rung.de
*.thecaringpeople.org
*.truesubmits.com
*.universalisaac.com
*.vocabularty.com
*.xn--ksehersteller-bfb.de
*.xn--skandinavischembel-r3b.de
*.xn--www-orthopdie-kfb.de
affinitywayer.co.uk
alpcanogrenciyurtlari.com
altstake.io
ariasalonsyr.com
blocktheory.net
breadmakers.com.au
consumerrights.co.za
denhag.com
dmenz.de
doppelschwert.de
edietreports.com
email365.org
equilibrio.es
euthyreose.de
exotiquecuisine.com
fixedagent.com.au
fixtwitter.com
flags4cash.com
footassylum.com
gallenblasenpolypen.de
gesuundheit.de
grefe.eu
jbftransportllc.com
jenniferwatkinsphotography.com
kashanya.com
krankenversicherungde.de
migreene.de
mirtilhos.eu
mmsg900132.com
myelolipom.de
nerologie.de
netdkotor.de
nikki-todd-catering.co.uk
opalandmarigold.com
pills247.net
pilza.de
polontv.pl
psevenmedicaldiagnostics.com
pzpz.fun
rotor-syndrom.de
schwellenpotential.de
sistemadatapro.org
steuererklae4rung.de
thecaringpeople.org
truesubmits.com
universalisaac.com
vocabularty.com
xn--ksehersteller-bfb.de
xn--skandinavischembel-r3b.de
xn--www-orthopdie-kfb.de

Other certificates including the domain name pzpz.fun

(limited to 100 certificates)
immbielen.de
pzpz.fun
tgestsieger.de
pzpz.fun
tgestsieger.de
immbielen.de

Certificate

The complete raw certificate details for pzpz.fun in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343244103182932211828155202062581426734285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 20:03:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 20:03:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pzpz.fun'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783225975597642023757901553910423429558985458473541547877310109042681739529938403946978819845144029968672494189504035991621631070066501677454008207569057475583303748847909960656203018057611048485986600989671522163111827169392688395290960176899858477838479294595490378078413351723936850499182049127901970231634423458881829036478216701309814743915561938951335067650430909000850275916861655611465164880383682303317558669484653225838838868564174130449681387372769805473058289263080597232687281805668534046230394963256922703755663515435081606317967628623777057391893014195757949008701166142298861162750484371104600686652272569205428825511125595403513170613460738657130596033507316794017930678999211335674712761480662354008868748683497376861338259375083444685674069217244700550349505283535761478180695702732733910649290147103413820351702324049696984934475934224093981923159964562314214237120730926869689112409155899927295553461577258740480118480493435641049319493252990713188893601620955608198703060624192139986285975900400656008894893052111404528512712937222003256089602400638082386471849877683806479496567785899737439099000867408302120606185231355354936412119860899602070955634360598587637248246690827657947247049084554779816404962942089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c46504f33db1398e7a1d128dc7a1554e1126a3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1950 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affinitywayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpcanogrenciyurtlari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altstake.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ariasalonsyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blocktheory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breadmakers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumerrights.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denhag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doppelschwert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edietreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.email365.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equilibrio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euthyreose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exotiquecuisine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixedagent.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixtwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flags4cash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footassylum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallenblasenpolypen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesuundheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grefe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbftransportllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenniferwatkinsphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kashanya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krankenversicherungde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migreene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirtilhos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmsg900132.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myelolipom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nerologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netdkotor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikki-todd-catering.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opalandmarigold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pills247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polontv.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psevenmedicaldiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pzpz.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotor-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwellenpotential.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sistemadatapro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuererklae4rung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecaringpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truesubmits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalisaac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocabularty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ksehersteller-bfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--skandinavischembel-r3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--www-orthopdie-kfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitywayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpcanogrenciyurtlari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altstake.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariasalonsyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blocktheory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breadmakers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerrights.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denhag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doppelschwert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edietreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email365.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equilibrio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euthyreose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exotiquecuisine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixedagent.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixtwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flags4cash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footassylum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallenblasenpolypen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesuundheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grefe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbftransportllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenniferwatkinsphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kashanya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krankenversicherungde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migreene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirtilhos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsg900132.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myelolipom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdkotor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikki-todd-catering.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opalandmarigold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pills247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polontv.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psevenmedicaldiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pzpz.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotor-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwellenpotential.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemadatapro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuererklae4rung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecaringpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truesubmits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalisaac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocabularty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ksehersteller-bfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--skandinavischembel-r3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--www-orthopdie-kfb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cfa565fa400000403004630440220527713b5250c1ecb3c50d92d70dc464c35a709e6f3015d5533bcbe78ec467fb002202cd521333c4f3794bc12d6ba3c718ef88376e4bb818574c4e170d654e88b46360077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfa565fab0000040300483046022100d2037c9baba4200cf8e1df483258a780af41a1f94390cd2cc5cb37160c015a1302210091a22ec196999f771fa55382c57d127ec7d0372acdb385e25698b32be4ba7bf6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0037eb0955518a0f0276adf45000200c56e410a3e93454516e5e04d60b4d99fdf2384fb880017c93bbe7af856a24df5c4a23d59b9c391c572a8084f0742151d02dcd31fe9d93039d5d2817ca88aa07c42c98e3dd7ad129dfc5a7f8fced77d46a5afa6a65f1ae2a44b453662cb218ea99c9be653d78fc1210e12dfc23e68ed7106156310a046201a8c79000a0a5d5bf87118da15be2dc0ac34cedf68ed3d10f59c7ad298e1a670a0000a07fb77749ac00d480a66853754e1db03aafc5f4f5134200212fceeffb956cadc6d40404be08726505559876b08a3993382dc310aa4d0b0cd7a776e4ba9bd3e951c68d1561275936ab14e30c3a5c9463344ed321626b68c2