bonafides.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:d0:2f:0d:f9:2a:a3:cf:a5:95:61:29:b7:c5:b7:3e:73:50 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bonafides.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:2f:0d:f9:2a:a3:cf:a5:95:61:29:b7:c5:b7:3e:73:50
Serial Number (int): 419290422315955510206719779270089330553680
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:a6:d8:8a:46:3e:92:cd:53:91:80:f5:d4:f3:5e:c7:ba:dc:8f:de
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 12:dc:55:99:84:e9:39:c0:2b:64:a9:3b:d4:fd:cc:7f:d5:da:e4:e4
Fingerprint (sha256): 5e:b9:b2:93:29:3a:2b:f3:94:6f:79:4a:39:62:c4:9b:55:1f:37:42:1e:36:05:47:a1:ff:f7:50:db:e5:38:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bonafides.eu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bonafides.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5c.com.au
*.allzweckschrank.de
*.analsexpraktiken.de
*.anyadiary.com
*.apnayojna.in
*.arbeitzam.de
*.artificialplant.com.au
*.bahamas.com.au
*.bestrecipe.com.au
*.binterest.de
*.bonafides.eu
*.camarinha.eu
*.cloudsquad.in
*.clubfadoqgranby.org
*.cokbaska.org
*.darmperistaltik.de
*.delaynieshomeinteriors.co.uk
*.geeksvg.com
*.gewuerzregale.de
*.hamsterpflege.de
*.kinomnenies.me
*.laktoseintoleranztest.de
*.losmundosdehachero.com
*.mannesoth.com
*.maxibutorok.hu
*.mayapbd.com
*.misurina.de
*.mo-mo.co
*.ntestin.online
*.ramos.eng.br
*.repolarisation.de
*.rubbishcollectionsydney.com.au
*.timesystem.us
*.tracheomalazie.de
*.velo-city2020.com
*.victorianissan.com
*.watchman.com.au
*.xanthinoxidase.de
*.xn--bauchhhlenschwangerschaft-3rc.de
*.xn--ehegelbte-v9a.de
*.xn--krperberechnung-8sb.de
*.xn--linuxfhrerschein-ozb.de
*.xn--mdchengames-l8a.de
*.xn--mnnerkorsett-gcb.de
*.xn--omaschlpfer-zhb.de
*.xn--osterkrbchen-9ib.de
*.xn--schiebefalttren-bwb.de
*.xn--showtnze-4za.de
*.xn--verhtungsshop-zob.de
*.youby.it
5c.com.au
allzweckschrank.de
analsexpraktiken.de
anyadiary.com
apnayojna.in
arbeitzam.de
artificialplant.com.au
bahamas.com.au
bestrecipe.com.au
binterest.de
bonafides.eu
camarinha.eu
cloudsquad.in
clubfadoqgranby.org
cokbaska.org
darmperistaltik.de
delaynieshomeinteriors.co.uk
geeksvg.com
gewuerzregale.de
hamsterpflege.de
kinomnenies.me
laktoseintoleranztest.de
losmundosdehachero.com
mannesoth.com
maxibutorok.hu
mayapbd.com
misurina.de
mo-mo.co
ntestin.online
ramos.eng.br
repolarisation.de
rubbishcollectionsydney.com.au
timesystem.us
tracheomalazie.de
velo-city2020.com
victorianissan.com
watchman.com.au
xanthinoxidase.de
xn--bauchhhlenschwangerschaft-3rc.de
xn--ehegelbte-v9a.de
xn--krperberechnung-8sb.de
xn--linuxfhrerschein-ozb.de
xn--mdchengames-l8a.de
xn--mnnerkorsett-gcb.de
xn--omaschlpfer-zhb.de
xn--osterkrbchen-9ib.de
xn--schiebefalttren-bwb.de
xn--showtnze-4za.de
xn--verhtungsshop-zob.de
youby.it

Other certificates including the domain name bonafides.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for bonafides.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419290422315955510206719779270089330553680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 18:46:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 18:46:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bonafides.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765888211846083901632105466856738421537218754800237527471752273624250263057379490542463204678584825130788797104867590482449655086267031181438239406419025578861509020570530753024552325057549092441024687414668523554294873765383275474046798322272171210773127246701272810000745545683029576795401087001761415499492742888104142442389181055621729636518674135208729407094181253701110105838801630569384137318390065527031706875644590292613532540051219312163235688407712221831667597507071944571041648652891045195750308989110598060852210973250700698090392792958220436274035644885146973496659836041131528508231677569139343069606869663708955152968529462396185493201298286108509088841766502258091011507608308493990464978536092611222662267808376836048279099844875898245861305713880784091442275117862065918028303172467289002041882480762737732230528851806130215112694465261546452921700538283227754752582315201960406416308394522441600605494906229889634631544528380918846423767614343990191678888870201980991614483051247066398899963526496331526455523337197702265621478614555255314694484991402828348198158339200550258927224903670011441976254391954985114264044984992394827488484841282473292950378428979219496666199403661055913399730548202915773063047043303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99a6d88a463e92cd539180f5d4f35ec7badc8fde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2040 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5c.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allzweckschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analsexpraktiken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anyadiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apnayojna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbeitzam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artificialplant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bahamas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestrecipe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonafides.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camarinha.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudsquad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubfadoqgranby.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cokbaska.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darmperistaltik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delaynieshomeinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geeksvg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gewuerzregale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamsterpflege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinomnenies.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laktoseintoleranztest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losmundosdehachero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mannesoth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxibutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayapbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.misurina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mo-mo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntestin.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ramos.eng.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repolarisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubbishcollectionsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timesystem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tracheomalazie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velo-city2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorianissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xanthinoxidase.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bauchhhlenschwangerschaft-3rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ehegelbte-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--krperberechnung-8sb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--linuxfhrerschein-ozb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mdchengames-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mnnerkorsett-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--omaschlpfer-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--osterkrbchen-9ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schiebefalttren-bwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--showtnze-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--verhtungsshop-zob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youby.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5c.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allzweckschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analsexpraktiken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyadiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnayojna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbeitzam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artificialplant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahamas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrecipe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonafides.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camarinha.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudsquad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubfadoqgranby.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokbaska.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darmperistaltik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delaynieshomeinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geeksvg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewuerzregale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamsterpflege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinomnenies.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laktoseintoleranztest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losmundosdehachero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannesoth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxibutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayapbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misurina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo-mo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntestin.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramos.eng.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repolarisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubbishcollectionsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesystem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracheomalazie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velo-city2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorianissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xanthinoxidase.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bauchhhlenschwangerschaft-3rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ehegelbte-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--krperberechnung-8sb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--linuxfhrerschein-ozb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mdchengames-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mnnerkorsett-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--omaschlpfer-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--osterkrbchen-9ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schiebefalttren-bwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--showtnze-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--verhtungsshop-zob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youby.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e2f0d983d0000040300483046022100dd3b4f32f2e9de5dfbee0d2dfc7cb4fe382c4f7b45ceef3dcd78eb605a4c683c022100ec30716bb823a0ca29efe2d6624ff67de73604ecb995e027edebbddcdb6cf57500750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2f0d9881000004030046304402202abc02a7315c27287d657da0577adfb66380a2813cb83c48bb737694de25474202207b023819f3c1cb95d8eb8142083821c2c6142497a866632f337af0ef79dad3c8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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