compressor.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:84:d7:72:6a:f3:de:42:29:85:be:fd:d2:ae:dd:7a:1f:46 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=compressor.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:d7:72:6a:f3:de:42:29:85:be:fd:d2:ae:dd:7a:1f:46
Serial Number (int): 393652794270797140782096954477231726010182
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:07:52:1d:50:e0:f2:79:b3:61:0d:3b:d1:77:76:05:55:9c:1b:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:69:eb:43:0c:8e:39:fd:76:89:65:7a:26:4d:2b:57:3a:4a:e4:67
Fingerprint (sha256): 60:c3:75:07:67:c0:57:d1:ae:70:86:c3:14:bd:eb:ae:09:36:87:dd:df:a1:f7:f9:9b:b7:de:57:ee:43:80:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate compressor.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for compressor.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123movies-123movies-123movies-123movies.online
*.amenagementjardin.net
*.anekadayaindonesia.com
*.besichtigung.de
*.cdpipeline.org
*.compressor.co.za
*.cryptosobi.com
*.dehnungsstab.de
*.diffuse.in
*.dimmschalter.de
*.fenbao77.com
*.finanzamt-berlin.de
*.finanzrteff.de
*.gayandesilva.com
*.gesundschop24.de
*.immoscoiut24.de
*.josephcohen.us
*.klammerpflaster.de
*.kommunikationswirtin.de
*.kondomgroesse.de
*.kraftband.de
*.laddereruption.cn
*.machine-trucks.com
*.marviindustries.com
*.minivan.de
*.naturalhealthycat.com
*.neworemtemple.com
*.neworleansafwa.org
*.pendantlights.de
*.pinteerest.de
*.pornofilim.de
*.radarfall.de
*.restaurantauxportesdelorient.com
*.salzwasserkrokodil.de
*.schwangerschaftt.de
*.starlinkindonesia.com
*.stolitza.com
*.sufentanil.de
*.tagesscghau.de
*.taizee.de
*.telephonetrim.cn
*.thirtyflirtyandsurviving.com
*.turtleislandpotteryithaca.com
*.unfallreporter.de
*.versteigeungspool.de
*.wdrr.de
*.xn--brsenzulassung-vpb.de
*.xn--gehirnentzndung-8vb.de
*.xn--hngestuhlgestell-vnb.de
*.xwv.de
123movies-123movies-123movies-123movies.online
amenagementjardin.net
anekadayaindonesia.com
besichtigung.de
cdpipeline.org
compressor.co.za
cryptosobi.com
dehnungsstab.de
diffuse.in
dimmschalter.de
fenbao77.com
finanzamt-berlin.de
finanzrteff.de
gayandesilva.com
gesundschop24.de
immoscoiut24.de
josephcohen.us
klammerpflaster.de
kommunikationswirtin.de
kondomgroesse.de
kraftband.de
laddereruption.cn
machine-trucks.com
marviindustries.com
minivan.de
naturalhealthycat.com
neworemtemple.com
neworleansafwa.org
pendantlights.de
pinteerest.de
pornofilim.de
radarfall.de
restaurantauxportesdelorient.com
salzwasserkrokodil.de
schwangerschaftt.de
starlinkindonesia.com
stolitza.com
sufentanil.de
tagesscghau.de
taizee.de
telephonetrim.cn
thirtyflirtyandsurviving.com
turtleislandpotteryithaca.com
unfallreporter.de
versteigeungspool.de
wdrr.de
xn--brsenzulassung-vpb.de
xn--gehirnentzndung-8vb.de
xn--hngestuhlgestell-vnb.de
xwv.de

Other certificates including the domain name compressor.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for compressor.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393652794270797140782096954477231726010182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 21:20:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 21:20:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'compressor.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824434402147139909965973999347259754908755569300943956723603676664893900438623164256430372115545296932333943980402208856622772745856586050796894148072610615719262880183308517838631259437002189672564317693760962596164778391356062251690309136221177505904915804697611700908450870698187813836650491843350027647617866179313483310995913284553716614680337710895175214491938888269678532439098062144523626404018609649195208587137591707539197270929711175811433276551883579242500064706156205390769217341658637501704283318484245707515283962221771244657805358047559786046279115426469238450821033225252450409698079485908148575010851751697578044308492339286478581147864088330974865951456708584620365604110388355263088158695757262351700427704206346717345304787288649045351907292940357527879666177941499697898805737410166950196652639688552370490741298767897255301832138952074541392189287445678107834588636888464561445529633828691098165751351888680302284540612983951997509159348628043565286278410117092679239251510795873906909867625575580672540042008779038853911464232245514473113564930544550870092049944195328563125689994765477908493390875232020218333808746391036766130905942182760398643297910021746063235049557679512195639183050229349935418602796061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e07521d50e0f279b3610d3bd1777605559c1b6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2062 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123movies-123movies-123movies-123movies.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amenagementjardin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anekadayaindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besichtigung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdpipeline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compressor.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptosobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dehnungsstab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diffuse.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dimmschalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fenbao77.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finanzamt-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finanzrteff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gayandesilva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundschop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immoscoiut24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.josephcohen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klammerpflaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kommunikationswirtin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kondomgroesse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraftband.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laddereruption.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.machine-trucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marviindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minivan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalhealthycat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neworemtemple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neworleansafwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pendantlights.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinteerest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornofilim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radarfall.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurantauxportesdelorient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salzwasserkrokodil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwangerschaftt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starlinkindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stolitza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sufentanil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagesscghau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taizee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telephonetrim.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thirtyflirtyandsurviving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turtleislandpotteryithaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unfallreporter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versteigeungspool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wdrr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brsenzulassung-vpb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gehirnentzndung-8vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hngestuhlgestell-vnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xwv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123movies-123movies-123movies-123movies.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amenagementjardin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anekadayaindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besichtigung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdpipeline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compressor.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptosobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dehnungsstab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diffuse.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimmschalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenbao77.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finanzamt-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finanzrteff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayandesilva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundschop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immoscoiut24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephcohen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klammerpflaster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kommunikationswirtin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kondomgroesse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraftband.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laddereruption.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'machine-trucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marviindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minivan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalhealthycat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworemtemple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworleansafwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pendantlights.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinteerest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornofilim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radarfall.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantauxportesdelorient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salzwasserkrokodil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwangerschaftt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starlinkindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stolitza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sufentanil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesscghau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taizee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telephonetrim.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirtyflirtyandsurviving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turtleislandpotteryithaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfallreporter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versteigeungspool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdrr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brsenzulassung-vpb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gehirnentzndung-8vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hngestuhlgestell-vnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xwv.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d6be8f97100000403004730450221009328ebe85b40bef8e9d4019bc0cbfb2cfe4e89eecbd2846410b4947c7a897388022059651abc87d1246d7d89b6423441b664b4b03c558af1bc88c337a821bad83787007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d6be8f9a10000040300483046022100eb58e292f368f635d60e6743320230f7375236fd1c31dc67d9d9ee810d6a141b02210093d36e7c35486f5aa13d3674911f2d78b23d1f5fc0b41f3d6a20ec6f1e488c81
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0056fe43606cf225fed8d38cdff31adaa81997dd16e6ac1cf73047c4183be5d3c1f4e3abe329b6de418ee995f7ace83b816c7dad4fb2684e27cb678de3b6763dd195a40cc553f3a095add2214db13f197214a0dd4d47121e2e5573994be963c5a749285758e05c1fe77d8ab52b8688551702f5bebd90dc49ff3fa77543134ab2642decea0661a32599628b319375e8961296c0ca742f361c09585ab203788ae1a392d5dc2e4461e0a606540361690d947fcda5a4bd0d050747d6528914e2782d35a0a588eb04342e247789a26d34a2d1b5567b90677f29ed385bb75003089f4b4f537c77ee482abf11a697676b56c244ce6addfb7f8e0d978b7fd1172533322309