diaet-abnehmen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:46:92:be:ad:d9:8c:b3:db:fd:b5:cd:b7:6b:a0:33:f3:44 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=diaet-abnehmen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:92:be:ad:d9:8c:b3:db:fd:b5:cd:b7:6b:a0:33:f3:44
Serial Number (int): 372463966761387316398934627412039943058244
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e7:c0:62:a0:33:d6:1e:83:c6:7e:3d:f3:96:f3:f1:7c:ee:d5:2e:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:dc:59:de:38:78:9c:0a:7d:0e:82:55:29:5c:c4:2b:03:82:bb:9b
Fingerprint (sha256): 63:3f:53:4e:b1:06:9c:f6:8c:bd:83:e5:38:6e:67:3b:0b:5e:2d:2c:31:d8:1b:04:1c:1e:f5:eb:f7:0c:af:3b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate diaet-abnehmen.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diaet-abnehmen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.autkrebs.de
*.bankblockchain.org
*.bej.be
*.bosh.sk
*.congregationalists.net
*.culturareizen.nl
*.dfj.de
*.dfk.de
*.dfr.de
*.dhc.de
*.diabetes-themen.de
*.diabetiker-wissen.de
*.diaet-abnehmen.de
*.domainraja.in
*.dynamism.com.au
*.ebank.com.au
*.effectiveedicator.com
*.ehentaigallery.com
*.futbolliberty.me
*.gaysingle.com.au
*.gin.co.za
*.gossiplots.eu
*.hindilinks4u.bz
*.kraeutertinktur.de
*.kunstpodium.nl
*.panicattack.com.au
*.placehoder.com
*.pornopics.de
*.potable.com.au
*.salzkrebse.de
*.santangelo.eu
*.shoppingdesire.org
*.sitemetrics.in
*.sounds.co.za
*.superdeals.co.in
*.sweethearrtvideo.com
*.taxadvisors.com.au
*.vaninsurance.de
*.videostor.de
*.xn--entspannungsbungen-x6b.de
*.xn--frben-gra.de
*.xn--ostergebck-x5a.de
*.xn--phnomenal-w2a.de
*.xn--rammschutzbgel-qsb.de
*.xn--schnppchen-kreuzfahrten-y7b.de
*.xn--schrankschlsser-jtb.de
*.xn--slldorf-n2a.de
*.xn--textbrse-r4a.de
*.yghj9999.com
*.yzcbt.com
autkrebs.de
bankblockchain.org
bej.be
bosh.sk
congregationalists.net
culturareizen.nl
dfj.de
dfk.de
dfr.de
dhc.de
diabetes-themen.de
diabetiker-wissen.de
diaet-abnehmen.de
domainraja.in
dynamism.com.au
ebank.com.au
effectiveedicator.com
ehentaigallery.com
futbolliberty.me
gaysingle.com.au
gin.co.za
gossiplots.eu
hindilinks4u.bz
kraeutertinktur.de
kunstpodium.nl
panicattack.com.au
placehoder.com
pornopics.de
potable.com.au
salzkrebse.de
santangelo.eu
shoppingdesire.org
sitemetrics.in
sounds.co.za
superdeals.co.in
sweethearrtvideo.com
taxadvisors.com.au
vaninsurance.de
videostor.de
xn--entspannungsbungen-x6b.de
xn--frben-gra.de
xn--ostergebck-x5a.de
xn--phnomenal-w2a.de
xn--rammschutzbgel-qsb.de
xn--schnppchen-kreuzfahrten-y7b.de
xn--schrankschlsser-jtb.de
xn--slldorf-n2a.de
xn--textbrse-r4a.de
yghj9999.com
yzcbt.com

Other certificates including the domain name diaet-abnehmen.de

(limited to 100 certificates)
4816.icu
diaet-abnehmen.de
futurama.site
cetelemfrance.online
lillies.com.au
betclub.com.br
diaet-abnehmen.de
viewmehindi.com
gantleyarms.co.uk
marzipanherstellung.de
diaet-abnehmen.de
lillies.com.au
marzipanherstellung.de
trueshopdepot.com

Certificate

The complete raw certificate details for diaet-abnehmen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372463966761387316398934627412039943058244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 08:28:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 08:28:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diaet-abnehmen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714016937425726174550408835732398602434099812587996230420246525880670941460846571117156274140483173797623060857367723129302743746447738833770094852286617911929846390063083063524891093564805974093146115360201015511854467550243697636521857165977258028524001722104336391122044868304933510243624894352425691086737605108558766091327997253643388323223647118208978701598938705853759603628143303717571119664248293085278517281554767594259250066991777180620507350729622121765232520759530729720230727433454401436724927482361014075711724773892041331257723937624939734512839537720993174300871709762551314718758236247071349471631202630276546594511604726212528445453338895148494764323661154952476245944135865300621112521593878330969275642384275369782970189961978552361035904534750455673652629064089796592188767127337605268836046353517281280225926733997789272479775807996670265851695937749825222049213599868799874531110991741183903655065537835931753824519393708647465339465638901038046824467321502308638809245145258318143128837180604196411431378528234364797827103979500428990296762392292386306598973106653751794526915449873465929632608626266167064843038914239684710384773614924806761982214808072757288305354525715828453856052443708545671489373766643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7c062a033d61e83c67e3df396f3f17ceed52e7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1858 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autkrebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankblockchain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bej.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bosh.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.congregationalists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.culturareizen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diabetes-themen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diabetiker-wissen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diaet-abnehmen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainraja.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamism.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.effectiveedicator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehentaigallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futbolliberty.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaysingle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gossiplots.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hindilinks4u.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraeutertinktur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kunstpodium.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panicattack.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.placehoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornopics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salzkrebse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santangelo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppingdesire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitemetrics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sounds.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superdeals.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweethearrtvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxadvisors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaninsurance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videostor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--entspannungsbungen-x6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frben-gra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ostergebck-x5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--phnomenal-w2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rammschutzbgel-qsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnppchen-kreuzfahrten-y7b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schrankschlsser-jtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--slldorf-n2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--textbrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yghj9999.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yzcbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autkrebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankblockchain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bej.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosh.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congregationalists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturareizen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes-themen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetiker-wissen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diaet-abnehmen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainraja.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamism.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effectiveedicator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehentaigallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futbolliberty.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaysingle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gossiplots.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindilinks4u.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraeutertinktur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunstpodium.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panicattack.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placehoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornopics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salzkrebse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santangelo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppingdesire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitemetrics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sounds.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superdeals.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweethearrtvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxadvisors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaninsurance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videostor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--entspannungsbungen-x6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frben-gra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ostergebck-x5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--phnomenal-w2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rammschutzbgel-qsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnppchen-kreuzfahrten-y7b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schrankschlsser-jtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--slldorf-n2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--textbrse-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yghj9999.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yzcbt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c58347fac0000040300483046022100a1f7a8d96fdeabe7708cdc39532a9039a20a905ba5751ff195b3501f45622ad9022100b21a8f70aef037bb1174b796a5e825516ae6c87f41d7cd7b261e10886aa6d9c700760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c58348058000004030047304502200af27cb9f361954b046eea9b030e7df8564f6a54b2b1fb103b75bbeb849f13a5022100a0bf470e51d117505a86a70af149954d798a3b31f8d9b856f803c660a2ad35e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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