beckenbodentrainings.de

Issued by R3

About this certificate

This digital certificate with serial number 04:49:5f:c6:a6:40:c1:ca:40:38:76:b9:bd:ae:69:54:d6:9d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=beckenbodentrainings.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:5f:c6:a6:40:c1:ca:40:38:76:b9:bd:ae:69:54:d6:9d
Serial Number (int): 373417064618657623043392572445546230634141
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:18:ad:64:d3:04:26:83:dd:f4:50:83:42:3e:dd:f9:6e:4f:ff:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:0f:e1:73:df:89:70:b0:55:37:a4:2e:4c:50:ab:18:f0:73:09:1e
Fingerprint (sha256): 61:f9:8e:de:68:2d:f2:b6:35:4b:6f:4f:32:aa:57:f8:3c:9f:47:a7:a5:47:82:17:9f:da:c6:67:8c:2e:b6:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate beckenbodentrainings.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beckenbodentrainings.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anniversarygift.com.au
*.apocynum.de
*.atsushinimura.com
*.beckenbodentrainings.de
*.bevfly.tokyo
*.bevfly.us
*.blends.com.au
*.brucellose.de
*.businessequipment.com.au
*.canadaholidays.com.au
*.coppd.de
*.crip.me
*.cruickshankblinds.co.uk
*.departed.com.au
*.depsychotherapie.de
*.diets.com.au
*.dsimfinity.de
*.ebay-kleiazeigen.de
*.enchondrom.de
*.expressloan.co.za
*.footyresult.com.au
*.gosteopathie.de
*.guesy.com
*.handyvertrege.de
*.hardyexpress.com
*.laminateflooring.com.au
*.lessee.com.au
*.lowboy.com.au
*.mammybanannie.com
*.merciaonline.net
*.neurotransmitters.de
*.politico.com.au
*.relatives.com.au
*.sella-turcica.de
*.shagle.co
*.sinaturehardware.com
*.sinidcatobanamex.org
*.spreekuur.be
*.swagbuckscd.xyz
*.symptommat.de
*.tecnishop.com
*.vintages.com.au
*.wild-oat.de
*.xn--brogrosshandel-gsb.de
*.xn--containertransportflge-cmc.de
*.xn--industriebodenbelge-wwb.de
*.xn--mietsvertrge-pcb.de
*.xn--pfndungsfreibetrag-mtb.de
*.xn--stromerhhungen-2pb.de
*.zahnarztrechnungen.de
anniversarygift.com.au
apocynum.de
atsushinimura.com
beckenbodentrainings.de
bevfly.tokyo
bevfly.us
blends.com.au
brucellose.de
businessequipment.com.au
canadaholidays.com.au
coppd.de
crip.me
cruickshankblinds.co.uk
departed.com.au
depsychotherapie.de
diets.com.au
dsimfinity.de
ebay-kleiazeigen.de
enchondrom.de
expressloan.co.za
footyresult.com.au
gosteopathie.de
guesy.com
handyvertrege.de
hardyexpress.com
laminateflooring.com.au
lessee.com.au
lowboy.com.au
mammybanannie.com
merciaonline.net
neurotransmitters.de
politico.com.au
relatives.com.au
sella-turcica.de
shagle.co
sinaturehardware.com
sinidcatobanamex.org
spreekuur.be
swagbuckscd.xyz
symptommat.de
tecnishop.com
vintages.com.au
wild-oat.de
xn--brogrosshandel-gsb.de
xn--containertransportflge-cmc.de
xn--industriebodenbelge-wwb.de
xn--mietsvertrge-pcb.de
xn--pfndungsfreibetrag-mtb.de
xn--stromerhhungen-2pb.de
zahnarztrechnungen.de

Other certificates including the domain name beckenbodentrainings.de

(limited to 100 certificates)
harmsel.nl
beckenbodentrainings.de
beckenbodentrainings.de
sella-turcica.de
beckenbodentrainings.de
beckenbodentrainings.de
metrotalk.co.in
pilzd.de
xn--posttraumatische-verbitterungsstrung-xud.de
waybeyondvoip.net
beckenbodentrainings.de

Certificate

The complete raw certificate details for beckenbodentrainings.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373417064618657623043392572445546230634141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 20:33:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 20:33:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beckenbodentrainings.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910030798569426827905656426898608826555346702629872374003286601678979401429838753649279649907612530865112324830603030050384018683115259353968153793511606287133787044923275305607698779420217028614507731145368794113571321467605366296334243907023640354336004537868038636472456617032454153535952866775065890987838722732625191056882625386120709852987152695139868320827031081789282217618925961055526835029362682601602290117345228870475373244372418848978622133654750142056881707530939981436120037801801451676207117674493356898130666860395148285161363672972555441902598298190249264509813269785653303413704884571332090855141030086085186011265698566601679945912370971254266411922232710442566012012031717644364230686283615803330606212329034112401881778757959245773254053539046927111587682300348178259694980289678065470103198499738102625826516034038992059227249434830867850383200502238632859357699408126458247007076241430385548631738737932266431248988198331785836043883470820721120099721279440772631903519236651973817567141126644071807126595664108088099550729535278019763844805995362496985518387661616965748697032651592555658084906423006595034207167504258942557623132866311706196483757517429040886694340351778299384755794107780208310827671412391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea18ad64d3042683ddf45083423eddf96e4fffdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anniversarygift.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apocynum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atsushinimura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beckenbodentrainings.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bevfly.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bevfly.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blends.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brucellose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessequipment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadaholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coppd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruickshankblinds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.departed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depsychotherapie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsimfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleiazeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enchondrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressloan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footyresult.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gosteopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handyvertrege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laminateflooring.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lessee.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowboy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mammybanannie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merciaonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurotransmitters.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.politico.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relatives.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sella-turcica.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shagle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinaturehardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinidcatobanamex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spreekuur.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swagbuckscd.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symptommat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vintages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wild-oat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brogrosshandel-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--containertransportflge-cmc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--industriebodenbelge-wwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mietsvertrge-pcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pfndungsfreibetrag-mtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--stromerhhungen-2pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zahnarztrechnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversarygift.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apocynum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atsushinimura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckenbodentrainings.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bevfly.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bevfly.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blends.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brucellose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessequipment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruickshankblinds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'departed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depsychotherapie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsimfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleiazeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enchondrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressloan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footyresult.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosteopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyvertrege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laminateflooring.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessee.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowboy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammybanannie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merciaonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurotransmitters.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politico.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relatives.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sella-turcica.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shagle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinaturehardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinidcatobanamex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreekuur.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swagbuckscd.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symptommat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wild-oat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brogrosshandel-gsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--containertransportflge-cmc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--industriebodenbelge-wwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mietsvertrge-pcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pfndungsfreibetrag-mtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--stromerhhungen-2pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zahnarztrechnungen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc574acc00000040300463044022065dc7e6dd3f3b7f6542cb9b8e1f35dcde5e8e4458743e950ee5e0ccc020e0c2e02204b41835c74cdc3f1e6f33301ece683d610aaa1bb063494aae069a00fc8389fc0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc574acc80000040300473045022100a9beddcd85f1d98e0fe90c73b32c2043756661b8a21df1499b906e343ecf7af6022011660c7eba86185e45f856d3695e3a6b9afd43578840e5f09c7fc95d101461cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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