stf.in

Issued by R3

About this certificate

This digital certificate with serial number 03:e6:66:32:ef:aa:55:8c:14:47:8c:30:60:a4:06:a8:37:cb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stf.in

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:66:32:ef:aa:55:8c:14:47:8c:30:60:a4:06:a8:37:cb
Serial Number (int): 339737647918500733168256352321939402405835
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:52:7f:8c:68:f9:ad:b1:28:31:5b:a0:59:28:46:b9:c2:2c:42:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:57:90:c1:40:f4:83:f7:7c:a4:b0:35:a6:39:27:54:ac:61:ca:bd
Fingerprint (sha256): 62:12:3d:3c:67:06:93:27:72:b7:bc:4f:53:1f:66:4c:32:3a:5c:76:c1:c1:95:d2:0c:0e:99:7d:a1:22:c2:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stf.in

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stf.in

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acellpm.com
*.americangoulag.com
*.cashforcarstrucksandsuvs.com
*.chicagobankingjobs.com
*.crystalwardobe.com
*.curbguyfl.com
*.dalbits.com
*.dfahealthinsurance.com
*.digitalcart247.com
*.dogtownrifa.com
*.donsautomotivecenter.com
*.dorneo.sk
*.ebikeconnections.com
*.elakbungalows.com
*.exostose.de
*.frankfrenchie.com
*.freethumbnaildownloader.com
*.greatvegiland.com
*.haarschneidetechniken.de
*.hermannveterinaryclinic.com
*.hochzeizkleider.de
*.homeofgrowth.com
*.justfallol.com
*.justice.es
*.kingrudeck.com
*.klxetly.com
*.learningctream.com
*.leivatanscans.com
*.maharajasgifts.com
*.marijuana-doctor.com
*.miscous.com
*.musicianshavesilence.com
*.qualitycamera.com.au
*.redemptionplus1.com
*.reiningchamp.com
*.sarewebtasarim.com
*.sarinaday.com
*.spokenperson.com
*.stf.in
*.sunbearteam.com
*.taylorsacehardware.com
*.tjipchallenge.com
*.treasurehouseint.com
*.usaopen.org
*.vague.tv
*.wetsuit.org
*.wwwhalifax.co.uk
*.xn--kokhlschrnke-ocb6vmd.de
*.xn--mikrofaserbettwsche-uwb.de
*.zuechter-online.de
acellpm.com
americangoulag.com
cashforcarstrucksandsuvs.com
chicagobankingjobs.com
crystalwardobe.com
curbguyfl.com
dalbits.com
dfahealthinsurance.com
digitalcart247.com
dogtownrifa.com
donsautomotivecenter.com
dorneo.sk
ebikeconnections.com
elakbungalows.com
exostose.de
frankfrenchie.com
freethumbnaildownloader.com
greatvegiland.com
haarschneidetechniken.de
hermannveterinaryclinic.com
hochzeizkleider.de
homeofgrowth.com
justfallol.com
justice.es
kingrudeck.com
klxetly.com
learningctream.com
leivatanscans.com
maharajasgifts.com
marijuana-doctor.com
miscous.com
musicianshavesilence.com
qualitycamera.com.au
redemptionplus1.com
reiningchamp.com
sarewebtasarim.com
sarinaday.com
spokenperson.com
stf.in
sunbearteam.com
taylorsacehardware.com
tjipchallenge.com
treasurehouseint.com
usaopen.org
vague.tv
wetsuit.org
wwwhalifax.co.uk
xn--kokhlschrnke-ocb6vmd.de
xn--mikrofaserbettwsche-uwb.de
zuechter-online.de

Other certificates including the domain name stf.in

(limited to 100 certificates)
camdenwollondillyadvertiser.com.au
qeryplugin.com
geicomilitary.co
kartoffelsalatrezepte.de
winetastings.com.au
geicomilitary.co
stf.in
xn--busunflle-02a.de
qeryplugin.com
*.area191.app
stf.in
geicomilitary.co
xmi.us
xn--stdtesuche-r5a.de

Certificate

The complete raw certificate details for stf.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp7XggDM2iBUPQs3se3ge
q9JZtBigv+myWbQ6uZI3LmxXsViK4VFve5dJxzRtSNqfsxfVSO0yYf+/49C67bMK
XsrbpHR9UGHUUvIas+yp5iPPiOJbf7iu253EgC6VKnqFVIUOR7fCTDDxxS0aJHkU
pOvYVG8alNWRhGODOR32T1Py2d5gsz6dhASLb+r+WnjAT79rDozdFwB82vEt669t
osKEyahnIPVwKOvvjFD8r8kSOTmKCfYkMFempvhSnm25X+JEDlQGXHVRPxtJbyMO
rHzHEgNJ4/eiAbsRtRlozej5EoabagZ5lSWIGZFeNaAF2g47u5msg8CXyIYOgXmD
vir4kTPAMmrT35FLZBFmbchraGALRoAhgASzdz8CB89G05qpT/Y8jnxg8rshnEP4
E+9lrdm1Eq4YkXe+iqzRfCIryzAXhXb/4yYjvSlR1DUS175PmoKkeRauW606E1w/
UerSVDt/eH1Fe5Sgd5WJN9lXxBVWGO/UZN8oEFZotfSkYmwMFA0tv9SYO0LUPiQb
K+/U5NkWMnBHLIfTZ5W5d6pKdu9qYR4GeX/CrC24mSa0U6S8uJv0/xKDlgacCWkV
L+qmE5ltkpbI5eAOIqIJWXiP5KzTBKPVXB5RKPJziN3821dTa+DthFxyc+uxXMll
LoCa3qUF/6hnlnFl9DV//B0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339737647918500733168256352321939402405835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 07:19:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 07:19:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stf.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684198970474123827216199002883197112731783900735957961659502528387287606695933145274236108344377422519805985958272395425683165161363286508656865172111220325052930443472352945253281676025877990385561160856758501563271948231601326909984215711185622779846277357023029693531530010085063987428398392636449747920298810953217981526004879804572273440469405272371859811807934243616716305800466682082680199591727561015478051552709307585967810695523749884641349394503759943421487127189278804610090739893005128982125719525315141111983992671427302289554557853644539017855514962783652435495150113505881602430386099657459777964186744157213245457362921547259262315405023605383395980188721366171571558303384629084006608709362740331448852325428892862743462860295614522415741346723696667647101296878836282941523863028036608338912612133198869782539535004808077396976758050426195996053611021994251932875358134972774206807368744842229178345113725840125625554199080839416702738820493964146798536122209988310159524714018446352591165902844692770440419960766368095363428236192808407680212094325737881400395729783443090363719996896569157863745037603664430959737066191508179250969418439399008721394209455415772058451770362158204398604290679941288973479289289757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a527f8c68f9adb128315ba0592846b9c22c42c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2030 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acellpm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americangoulag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashforcarstrucksandsuvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicagobankingjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crystalwardobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curbguyfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dalbits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfahealthinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalcart247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogtownrifa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donsautomotivecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dorneo.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebikeconnections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elakbungalows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exostose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankfrenchie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freethumbnaildownloader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatvegiland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haarschneidetechniken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hermannveterinaryclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hochzeizkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeofgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justfallol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justice.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingrudeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klxetly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learningctream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leivatanscans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maharajasgifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marijuana-doctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miscous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicianshavesilence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualitycamera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redemptionplus1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reiningchamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarewebtasarim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarinaday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spokenperson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stf.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunbearteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taylorsacehardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjipchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treasurehouseint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usaopen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vague.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wetsuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwhalifax.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kokhlschrnke-ocb6vmd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mikrofaserbettwsche-uwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuechter-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acellpm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americangoulag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashforcarstrucksandsuvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagobankingjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalwardobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curbguyfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalbits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfahealthinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcart247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogtownrifa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donsautomotivecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorneo.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebikeconnections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elakbungalows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exostose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfrenchie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freethumbnaildownloader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatvegiland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haarschneidetechniken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermannveterinaryclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochzeizkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeofgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justfallol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justice.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingrudeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klxetly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningctream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leivatanscans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maharajasgifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marijuana-doctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miscous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicianshavesilence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualitycamera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redemptionplus1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reiningchamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarewebtasarim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarinaday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spokenperson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stf.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunbearteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylorsacehardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjipchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasurehouseint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaopen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vague.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetsuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwhalifax.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kokhlschrnke-ocb6vmd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mikrofaserbettwsche-uwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuechter-online.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189c4c79f90000004030046304402206f6800683808a0c64dbdafe4ff1746e4df7cbf03167d116bd7d84a5b13bd64ff02205375c586fee1c36323fc6e751691176c4649f081f9b756e8249c746cd713bc7d007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189c4c79fb900000403004630440220396467fcb73bc37a4a2d9234f539f9df0c9eb4b45fa89ccb50afc217931c48d802204bfd15ea4da8ec51c374c3bc5c5c379f8c0d47d3cfce50d1ec261bdaabb48260
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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