jzf.de

Issued by R3

About this certificate

This digital certificate with serial number 03:60:5b:f1:93:fa:7b:d0:6f:5f:9d:4f:97:07:46:64:42:48 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jzf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:60:5b:f1:93:fa:7b:d0:6f:5f:9d:4f:97:07:46:64:42:48
Serial Number (int): 294126179112209737674334980848479644172872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:9a:ab:26:e5:34:2f:fe:d4:c5:8c:55:42:9d:73:3c:3e:e2:54:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:7d:4c:f5:9e:d6:09:86:90:b3:33:86:20:66:d1:f4:ef:97:44:e8
Fingerprint (sha256): 61:fd:be:f8:d3:49:1d:7d:d2:12:e9:e2:8f:73:60:30:79:14:bc:40:a4:ce:ea:81:f0:9c:0e:9e:f6:4f:82:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jzf.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jzf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aberturasdg.com
*.aflrelations.com
*.amplofy.com
*.beidish.com
*.bubbleled.com
*.chateaudebeauregard.net
*.cvtreeservice.net
*.divisenkurse.de
*.emilyatacklive.com
*.excavationcoffrageap.com
*.gedaechtnisluecken.de
*.hopfarmauctionroom.co.uk
*.horoscopopersonal.com
*.indianmuseum-calcutta.org
*.iyd.de
*.jns.eu
*.jzf.de
*.kirtonwindows.co.uk
*.livefitness.de
*.livelorecompensa.info
*.made-lv.com
*.manualidades.de
*.mekonsportswear.com
*.metaav.cyou
*.nicknames.be
*.non-fungible.me
*.noses.ca
*.ntq.de
*.oopslist.com
*.outlet.co.za
*.pakistan.co.za
*.pcgamesyard.com
*.silvercreekgolfcarts.com
*.spercook.com
*.suitsplus.co.uk
*.tagessxhau.de
*.tradeisreal.com
*.unk.eu
*.valdesmusica.com
*.vbl.au
*.wpreview.pro
*.xn--dstermhle-q9af.de
*.xn--flge-buchen-uhb.de
*.xn--fremdwrte-57a.de
*.xn--glckwunschschreiben-69b.de
*.xn--kchenmaschine-wob.de
*.xn--radunterwsche-jfb.de
*.xn--rehbrcke-b6a.de
*.xn--verdienstmglichkeit-z6b.de
*.zawameki.net
aberturasdg.com
aflrelations.com
amplofy.com
beidish.com
bubbleled.com
chateaudebeauregard.net
cvtreeservice.net
divisenkurse.de
emilyatacklive.com
excavationcoffrageap.com
gedaechtnisluecken.de
hopfarmauctionroom.co.uk
horoscopopersonal.com
indianmuseum-calcutta.org
iyd.de
jns.eu
jzf.de
kirtonwindows.co.uk
livefitness.de
livelorecompensa.info
made-lv.com
manualidades.de
mekonsportswear.com
metaav.cyou
nicknames.be
non-fungible.me
noses.ca
ntq.de
oopslist.com
outlet.co.za
pakistan.co.za
pcgamesyard.com
silvercreekgolfcarts.com
spercook.com
suitsplus.co.uk
tagessxhau.de
tradeisreal.com
unk.eu
valdesmusica.com
vbl.au
wpreview.pro
xn--dstermhle-q9af.de
xn--flge-buchen-uhb.de
xn--fremdwrte-57a.de
xn--glckwunschschreiben-69b.de
xn--kchenmaschine-wob.de
xn--radunterwsche-jfb.de
xn--rehbrcke-b6a.de
xn--verdienstmglichkeit-z6b.de
zawameki.net

Other certificates including the domain name jzf.de

(limited to 100 certificates)
polenporno.de
jzf.de
jzf.de
jzf.de
cariera.org
jzf.de
jzf.de
jru.de
grand-mal-anfall.de
fo2online.de
grand-mal-anfall.de
jzf.de
lohnsiegel.de

Certificate

The complete raw certificate details for jzf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294126179112209737674334980848479644172872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 21:27:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 21:27:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jzf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900016417411815744205862875597465829795307136908722179549392089697923626229297118050371261493768937034054956102192389033688617508969786767434654463915336488783595460820620939882310651518326405162263267676899972880674409531626393486819119429136356627773908466899375417984147038093058880949609937823324182492586973656536757504560437984144583769926272998721211855677523032949266259542988021186051299203473231589189817897770209684392226255030784070806237412201642302396464846119090769230819787480739571728523509158188926675369450391154533680376915721284650148279040552193723896259885235805590153612735096566807197283819149957006711643917771587529392510854221783950414434800571548218373639802155367075194744674424439198797345334641617296652146044569765512395080082997854961052119542551017833952907424879737576809597895606282295926934105922167256624171833193630870866665435976148602716019443956522419862375018248199765229993359034238903277646663213009070404534914759694389071402100422592037997851946019499856898149902020206359417388690808336107205566495954932307815903490825140612432540165277716616266835904135553137033864208543762725359056061524885862592877026592403837491524141423034736431307594707054100638352854012627713096040993723509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b9aab26e5342ffed4c58c55429d733c3ee254c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aberturasdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aflrelations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amplofy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beidish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bubbleled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chateaudebeauregard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvtreeservice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divisenkurse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emilyatacklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excavationcoffrageap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gedaechtnisluecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopfarmauctionroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horoscopopersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianmuseum-calcutta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iyd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jzf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirtonwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livefitness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livelorecompensa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.made-lv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manualidades.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mekonsportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metaav.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicknames.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-fungible.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oopslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outlet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcgamesyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvercreekgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spercook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitsplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagessxhau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradeisreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valdesmusica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vbl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpreview.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dstermhle-q9af.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flge-buchen-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremdwrte-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glckwunschschreiben-69b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kchenmaschine-wob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--radunterwsche-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rehbrcke-b6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--verdienstmglichkeit-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zawameki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberturasdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflrelations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplofy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beidish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubbleled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chateaudebeauregard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvtreeservice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divisenkurse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilyatacklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excavationcoffrageap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedaechtnisluecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopfarmauctionroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horoscopopersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianmuseum-calcutta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jzf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirtonwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livefitness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livelorecompensa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'made-lv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manualidades.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekonsportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaav.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicknames.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'non-fungible.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oopslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgamesyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvercreekgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spercook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitsplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagessxhau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeisreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valdesmusica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vbl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpreview.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dstermhle-q9af.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flge-buchen-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremdwrte-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glckwunschschreiben-69b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kchenmaschine-wob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--radunterwsche-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rehbrcke-b6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--verdienstmglichkeit-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zawameki.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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