anlageplanung.de

Issued by R3

About this certificate

This digital certificate with serial number 03:91:12:51:e2:68:7f:bb:bc:98:9f:6f:b5:41:35:79:7e:1e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=anlageplanung.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:91:12:51:e2:68:7f:bb:bc:98:9f:6f:b5:41:35:79:7e:1e
Serial Number (int): 310702152270890317831568074242846440914462
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:d2:0e:f5:0c:7e:57:44:87:55:de:ee:5e:f0:85:39:b2:44:86:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:e6:1c:4f:ff:42:7f:7c:eb:0d:58:23:41:1f:5c:78:17:6b:31:90
Fingerprint (sha256): 62:f9:62:a2:28:be:0e:77:44:7d:7a:bd:52:95:30:f9:99:3a:31:2b:de:aa:8e:a0:23:d3:b4:b5:a2:ed:f8:30

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate anlageplanung.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for anlageplanung.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.100dayagency.com
*.12kj2ong1.xyz
*.2bikes.xyz
*.anlageplanung.de
*.answers.es
*.antlinkapp.com
*.assassincreedcodenamejade.com
*.balkondekoration.de
*.beinmuskeltraining.de
*.blue-sky.site
*.boum.club
*.bozzetto.eu
*.by4143.com
*.careerfather.site
*.claimsasurion.com
*.deedeenailspa.com
*.divinamaru.com
*.druckerzzbehoer.de
*.eax.de
*.estrategist.com.au
*.fmu.de
*.folgeversicherung.de
*.googleuk.com
*.granvilletavern.com.au
*.grosshande.de
*.hautauschlag.de
*.hoeskop.de
*.homeassistance.com.au
*.hotstar.uk
*.kamfaychineserestaurant.com.au
*.magazin-tkani.site
*.myflixers.nl
*.netfav5.com
*.peone.club
*.permitless.com
*.rettet.de
*.riesenpuzzle.de
*.skyiptvhd.shop
*.smule.de
*.somolket.shop
*.sports-supplies.shop
*.tauchanzuege.de
*.tiaacre.com
*.verivocx.de
*.versicherungen-de.de
*.watersportstech.shop
*.weposapp.club
*.xn--kruterpeeling-cfb.de
*.xn--schnheitsklinik-stuttgart-0rc.de
*.zzk.de
100dayagency.com
12kj2ong1.xyz
2bikes.xyz
anlageplanung.de
answers.es
antlinkapp.com
assassincreedcodenamejade.com
balkondekoration.de
beinmuskeltraining.de
blue-sky.site
boum.club
bozzetto.eu
by4143.com
careerfather.site
claimsasurion.com
deedeenailspa.com
divinamaru.com
druckerzzbehoer.de
eax.de
estrategist.com.au
fmu.de
folgeversicherung.de
googleuk.com
granvilletavern.com.au
grosshande.de
hautauschlag.de
hoeskop.de
homeassistance.com.au
hotstar.uk
kamfaychineserestaurant.com.au
magazin-tkani.site
myflixers.nl
netfav5.com
peone.club
permitless.com
rettet.de
riesenpuzzle.de
skyiptvhd.shop
smule.de
somolket.shop
sports-supplies.shop
tauchanzuege.de
tiaacre.com
verivocx.de
versicherungen-de.de
watersportstech.shop
weposapp.club
xn--kruterpeeling-cfb.de
xn--schnheitsklinik-stuttgart-0rc.de
zzk.de

Other certificates including the domain name anlageplanung.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for anlageplanung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310702152270890317831568074242846440914462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 06:55:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-01 06:55:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'anlageplanung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659252509923566235468283254118917861374006059255595304530510160541842804603487069459280532452190347205593916155852454275114553532576002159430563077312486511790195312034117942699932597771387353899605227807193928845021861439970034498560443161047704107976106971408038111005328975191246633110517924400412039815147979830903330873826326698423784718971084233522624103064398194718824812803068553384635918299953185582027672682441622526054931896010816091718290900985166198554873472131236014041232069684871725645069436097141628572459663540564713755332410623208244853867719067142516548199742022012901347636067109609788309463713612967979435814209492406519589310457914772997493515202372389518674285212094425395812456908298570118866156287580628579038047000899596284299265149199219441989426428877191085591472576423517620418432814870228403727635797394574000795117284059432006565178914479937312456555634491546782289848986897677964513383462960284491585696755833060998387878005598738589417182331266478418047699996598824330881149778737154120264175462212544589305040306673144426144232797067499098410609351525365394379872464007114319872007529607955670676034581243865027118926004813602537321316748582990789884391364359268350750704724490740722357415187675367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ad20ef50c7e57448755deee5ef08539b2448654
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.100dayagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.12kj2ong1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2bikes.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anlageplanung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.answers.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antlinkapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assassincreedcodenamejade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balkondekoration.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beinmuskeltraining.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blue-sky.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boum.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bozzetto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.by4143.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careerfather.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claimsasurion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deedeenailspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divinamaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.druckerzzbehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estrategist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.folgeversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granvilletavern.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grosshande.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hautauschlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoeskop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeassistance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotstar.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamfaychineserestaurant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magazin-tkani.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myflixers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netfav5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peone.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.permitless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rettet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riesenpuzzle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyiptvhd.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somolket.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sports-supplies.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tauchanzuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiaacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verivocx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versicherungen-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watersportstech.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weposapp.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kruterpeeling-cfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnheitsklinik-stuttgart-0rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zzk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100dayagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12kj2ong1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2bikes.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anlageplanung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antlinkapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assassincreedcodenamejade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balkondekoration.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinmuskeltraining.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blue-sky.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boum.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bozzetto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'by4143.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerfather.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsasurion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deedeenailspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinamaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druckerzzbehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estrategist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folgeversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granvilletavern.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grosshande.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hautauschlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoeskop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeassistance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotstar.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamfaychineserestaurant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin-tkani.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myflixers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netfav5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peone.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permitless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rettet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riesenpuzzle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyiptvhd.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somolket.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sports-supplies.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tauchanzuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiaacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verivocx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versicherungen-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watersportstech.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weposapp.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kruterpeeling-cfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnheitsklinik-stuttgart-0rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fdd18a1280000040300483046022100a8b8e12176800feb445f99f596c9b38ee1752af0cc9c691781a4537ffcc00194022100d52f11b1b9a78bacde12f9aeaec74d4b349a39398d3be619e2cf1feb1c72db12007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fdd18a1ea0000040300463044022022ad3c184e86215e669229e85e5b0a3e8f6a29ebbff3dd24250e000bdb4d9ccb022058a2506d85ce90b5ed0bbb2d337933955674f8be6fb34a3e3ccadfc5d12d862e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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