wwwflugboerse.de

Issued by R3

About this certificate

This digital certificate with serial number 03:46:84:2e:6b:47:ef:98:4f:ee:84:47:7c:88:b6:21:ac:24 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wwwflugboerse.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:84:2e:6b:47:ef:98:4f:ee:84:47:7c:88:b6:21:ac:24
Serial Number (int): 285332322596762712060382331149475008064548
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:64:c9:30:5e:86:fb:ab:a0:cf:d3:8c:51:43:f2:4d:9e:28:cc:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:ce:97:ee:3c:ce:44:e7:27:70:2c:e6:1f:ea:18:1c:3f:a2:34:fd
Fingerprint (sha256): 63:c6:d9:d2:04:6d:65:54:68:99:67:ba:92:a9:35:48:6e:a3:ef:fc:6d:f0:2f:74:e6:3b:ab:91:36:82:5e:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wwwflugboerse.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwwflugboerse.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a8g.au
*.addictinggames.au
*.anadolufm.net
*.bbctalent.co.uk
*.benita.au
*.bodybrick.com
*.boxebrasil.com.br
*.butorokmagyar.hu
*.canale.au
*.chemicalenergy.com.au
*.cloudstart.in
*.counting.au
*.dalailama.au
*.demarchepermis.com
*.doba.au
*.floreskulleather.com
*.freerider.au
*.gaydadandson.com
*.googodeals.net
*.hairdryer.au
*.hodura.de
*.holds.au
*.homesecuritysystems.au
*.keepa.au
*.lqj.au
*.miraclelounge.net
*.nge.es
*.nuclearelectricity.com.au
*.octavian.com.au
*.pacsun.au
*.petal.com.au
*.postcards.au
*.rippling.au
*.sunnybankrealestate.com.au
*.superbike.au
*.tierheimkassel.de
*.traintimes.au
*.upcomingmovies.de
*.vacantland.au
*.vaginalsonde.de
*.vender.com.au
*.wwwdfbnet.de
*.wwwfinanztest.de
*.wwwflugboerse.de
*.wwwthestreameast.me
*.xn--brsenplanspiel-vpb.de
*.xn--eibren-dua.de
*.xn--private-krankenversicherung-selbstndige-jkd.de
*.xn--riesenschildkrten-d0b.de
*.xvp.au
a8g.au
addictinggames.au
anadolufm.net
bbctalent.co.uk
benita.au
bodybrick.com
boxebrasil.com.br
butorokmagyar.hu
canale.au
chemicalenergy.com.au
cloudstart.in
counting.au
dalailama.au
demarchepermis.com
doba.au
floreskulleather.com
freerider.au
gaydadandson.com
googodeals.net
hairdryer.au
hodura.de
holds.au
homesecuritysystems.au
keepa.au
lqj.au
miraclelounge.net
nge.es
nuclearelectricity.com.au
octavian.com.au
pacsun.au
petal.com.au
postcards.au
rippling.au
sunnybankrealestate.com.au
superbike.au
tierheimkassel.de
traintimes.au
upcomingmovies.de
vacantland.au
vaginalsonde.de
vender.com.au
wwwdfbnet.de
wwwfinanztest.de
wwwflugboerse.de
wwwthestreameast.me
xn--brsenplanspiel-vpb.de
xn--eibren-dua.de
xn--private-krankenversicherung-selbstndige-jkd.de
xn--riesenschildkrten-d0b.de
xvp.au

Other certificates including the domain name wwwflugboerse.de

(limited to 100 certificates)
allstarpaving.co.uk
booicasinoplay.net
xxxtgp.net
cancercenters.org
*.3dprinted.in
wwwflugboerse.de
wwwflugboerse.de
coingesture.com
doba.au
doba.au
nayaraalves.com
southeast-home-educators.co.uk
xn--eibren-dua.de

Certificate

The complete raw certificate details for wwwflugboerse.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM4DCCC8igAwIBAgISA0aELmtH75hP7oRHfIi2IawkMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDEyMjUxMDBaFw0yNDA2MzAyMjUwNTlaMBsxGTAXBgNVBAMT
EHd3d2ZsdWdib2Vyc2UuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDBRbrb+CaYCmSNBQjM167JfAtkBS1P4+9zmJy+4fbnXpipRXGzs/1OnlKHWTcq
TU+YeF8vdfYCM6sRPl5qwqeQAHYexUSouXl0B7Y6vfW73wXYW5qF+JQXIkVQU0N7
sfL9NDP7Vw+Hya3xaKbwPrBRdZySoT/dr3XPiZyysnJH2oeOZOT9S+qmy2BakzTb
YXIIC600ghowwtAuA37G8Sv1BW+Z1cOtDexAYOL/oKB8KbH91QGrZ/gwa+RlzbYY
rWMMHYsdhc3DicTrkofb8HF2/hEHl+nLLGf2xOk52HXVEgnxDZgwSSpU217ONI+x
FN/R+2WCdhTmTPGTsiPSCe7qWDNAEbwMOkGPBIm0LYjGPimsiCWiKX6vEUezOSPw
4M6Y7xHycDxYnLKXK/T6Uo4jtWLmArETzP1BEvksgEUHbhzcKYjz7dkwic0CY9s+
QWUPQLpe7VCC4We5XZIA78VbhXYrUr9tPBddAr5QMDXZI6eYM9Rcc4OFtgk3K4bI
iBjytdNH+CkX6X8QgSSJATjo6bn6s1oolqZHJYNKbgM0u3rgDxvUXJx9Y90/notu
VhiqMeEpd1OgJWZPiudR1qjjl5PNlbCq1/OaIKbq9/igI0m/c7ZbiN6xU+YQPir0
rkZNl/zb7nZmFaYZiPzVSnEZRS3vGgAJMrfPLAKGtyjZywIDAQABo4IJBTCCCQEw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT1ZMkwXob7q6DP04xRQ/JNnijMZDAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCBw0GA1UdEQSCBwQwggcAgggqLmE4Zy5hdYIT
Ki5hZGRpY3RpbmdnYW1lcy5hdYIPKi5hbmFkb2x1Zm0ubmV0ghEqLmJiY3RhbGVu
dC5jby51a4ILKi5iZW5pdGEuYXWCDyouYm9keWJyaWNrLmNvbYITKi5ib3hlYnJh
c2lsLmNvbS5icoISKi5idXRvcm9rbWFneWFyLmh1ggsqLmNhbmFsZS5hdYIXKi5j
aGVtaWNhbGVuZXJneS5jb20uYXWCDyouY2xvdWRzdGFydC5pboINKi5jb3VudGlu
Zy5hdYIOKi5kYWxhaWxhbWEuYXWCFCouZGVtYXJjaGVwZXJtaXMuY29tggkqLmRv
YmEuYXWCFiouZmxvcmVza3VsbGVhdGhlci5jb22CDiouZnJlZXJpZGVyLmF1ghIq
LmdheWRhZGFuZHNvbi5jb22CECouZ29vZ29kZWFscy5uZXSCDiouaGFpcmRyeWVy
LmF1ggsqLmhvZHVyYS5kZYIKKi5ob2xkcy5hdYIYKi5ob21lc2VjdXJpdHlzeXN0
ZW1zLmF1ggoqLmtlZXBhLmF1gggqLmxxai5hdYITKi5taXJhY2xlbG91bmdlLm5l
dIIIKi5uZ2UuZXOCGyoubnVjbGVhcmVsZWN0cmljaXR5LmNvbS5hdYIRKi5vY3Rh
dmlhbi5jb20uYXWCCyoucGFjc3VuLmF1gg4qLnBldGFsLmNvbS5hdYIOKi5wb3N0
Y2FyZHMuYXWCDSoucmlwcGxpbmcuYXWCHCouc3VubnliYW5rcmVhbGVzdGF0ZS5j
b20uYXWCDiouc3VwZXJiaWtlLmF1ghMqLnRpZXJoZWlta2Fzc2VsLmRlgg8qLnRy
YWludGltZXMuYXWCEyoudXBjb21pbmdtb3ZpZXMuZGWCDyoudmFjYW50bGFuZC5h
dYIRKi52YWdpbmFsc29uZGUuZGWCDyoudmVuZGVyLmNvbS5hdYIOKi53d3dkZmJu
ZXQuZGWCEioud3d3ZmluYW56dGVzdC5kZYISKi53d3dmbHVnYm9lcnNlLmRlghUq
Lnd3d3RoZXN0cmVhbWVhc3QubWWCGyoueG4tLWJyc2VucGxhbnNwaWVsLXZwYi5k
ZYITKi54bi0tZWlicmVuLWR1YS5kZYI0Ki54bi0tcHJpdmF0ZS1rcmFua2VudmVy
c2ljaGVydW5nLXNlbGJzdG5kaWdlLWprZC5kZYIeKi54bi0tcmllc2Vuc2NoaWxk
a3J0ZW4tZDBiLmRlgggqLnh2cC5hdYIGYThnLmF1ghFhZGRpY3RpbmdnYW1lcy5h
dYINYW5hZG9sdWZtLm5ldIIPYmJjdGFsZW50LmNvLnVrggliZW5pdGEuYXWCDWJv
ZHlicmljay5jb22CEWJveGVicmFzaWwuY29tLmJyghBidXRvcm9rbWFneWFyLmh1
ggljYW5hbGUuYXWCFWNoZW1pY2FsZW5lcmd5LmNvbS5hdYINY2xvdWRzdGFydC5p
boILY291bnRpbmcuYXWCDGRhbGFpbGFtYS5hdYISZGVtYXJjaGVwZXJtaXMuY29t
ggdkb2JhLmF1ghRmbG9yZXNrdWxsZWF0aGVyLmNvbYIMZnJlZXJpZGVyLmF1ghBn
YXlkYWRhbmRzb24uY29tgg5nb29nb2RlYWxzLm5ldIIMaGFpcmRyeWVyLmF1gglo
b2R1cmEuZGWCCGhvbGRzLmF1ghZob21lc2VjdXJpdHlzeXN0ZW1zLmF1gghrZWVw
YS5hdYIGbHFqLmF1ghFtaXJhY2xlbG91bmdlLm5ldIIGbmdlLmVzghludWNsZWFy
ZWxlY3RyaWNpdHkuY29tLmF1gg9vY3Rhdmlhbi5jb20uYXWCCXBhY3N1bi5hdYIM
cGV0YWwuY29tLmF1ggxwb3N0Y2FyZHMuYXWCC3JpcHBsaW5nLmF1ghpzdW5ueWJh
bmtyZWFsZXN0YXRlLmNvbS5hdYIMc3VwZXJiaWtlLmF1ghF0aWVyaGVpbWthc3Nl
bC5kZYINdHJhaW50aW1lcy5hdYIRdXBjb21pbmdtb3ZpZXMuZGWCDXZhY2FudGxh
bmQuYXWCD3ZhZ2luYWxzb25kZS5kZYINdmVuZGVyLmNvbS5hdYIMd3d3ZGZibmV0
LmRlghB3d3dmaW5hbnp0ZXN0LmRlghB3d3dmbHVnYm9lcnNlLmRlghN3d3d0aGVz
dHJlYW1lYXN0Lm1lghl4bi0tYnJzZW5wbGFuc3BpZWwtdnBiLmRlghF4bi0tZWli
cmVuLWR1YS5kZYIyeG4tLXByaXZhdGUta3JhbmtlbnZlcnNpY2hlcnVuZy1zZWxi
c3RuZGlnZS1qa2QuZGWCHHhuLS1yaWVzZW5zY2hpbGRrcnRlbi1kMGIuZGWCBnh2
cC5hdTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA
7wB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjpwSx2QAAAQD
AEcwRQIgWZQ1CYLouuU/XBTh9vVk4Gxriae5fyoCIS6LpQpJPPMCIQDag++pp1tB
UMHaC++cSoLl0TXZSsNy2S3JZeH53WgBLgB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/
H4Vq68G/KIXs+GRuAAABjpwSx3EAAAQDAEYwRAIgGsX+MXHG/3bzYzfAEbClKxgu
y1uUUMe2azWzHDAx5ewCIErsrgBr8tU++TBgGXm2hUbRmcceH5bnkvbAKg1GSIPu
MA0GCSqGSIb3DQEBCwUAA4IBAQAqunS1quj3sgeGceFrJBQflXiQJ/Gm8Nmnsgc0
xB44NwKRjSwZj61TyIgLGc008ARLtObMhfd1/74Q2WFRB0kSrhEx0JWdR1rutVvI
U9e7N5X6SzjqgEuc5zYPHn2WCRoLwSsVg6qEJPHorm0qEdxDLM3+Zo032abzUjkv
LG0UJq5OQnBrJqvkkLjCpS9tcWCyYAL6l7XogwLyyR+S3QdG23ShOVUibn+WJ4fy
Svpk38HvV9MAJhWwUiPEJVqA1mncKBpDlVkk7Dv1kYGdo0WVh8R3SX6ebku60Se0
wCOpo8i2jcKuZNH9t/buFvs8H6kBHvLeFAD8yvw6vCsjjp9h
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwUW62/gmmApkjQUIzNeu
yXwLZAUtT+Pvc5icvuH2516YqUVxs7P9Tp5Sh1k3Kk1PmHhfL3X2AjOrET5easKn
kAB2HsVEqLl5dAe2Or31u98F2FuahfiUFyJFUFNDe7Hy/TQz+1cPh8mt8Wim8D6w
UXWckqE/3a91z4mcsrJyR9qHjmTk/UvqpstgWpM022FyCAutNIIaMMLQLgN+xvEr
9QVvmdXDrQ3sQGDi/6CgfCmx/dUBq2f4MGvkZc22GK1jDB2LHYXNw4nE65KH2/Bx
dv4RB5fpyyxn9sTpOdh11RIJ8Q2YMEkqVNtezjSPsRTf0ftlgnYU5kzxk7Ij0gnu
6lgzQBG8DDpBjwSJtC2Ixj4prIgloil+rxFHszkj8ODOmO8R8nA8WJyylyv0+lKO
I7Vi5gKxE8z9QRL5LIBFB24c3CmI8+3ZMInNAmPbPkFlD0C6Xu1QguFnuV2SAO/F
W4V2K1K/bTwXXQK+UDA12SOnmDPUXHODhbYJNyuGyIgY8rXTR/gpF+l/EIEkiQE4
6Om5+rNaKJamRyWDSm4DNLt64A8b1FycfWPdP56LblYYqjHhKXdToCVmT4rnUdao
45eTzZWwqtfzmiCm6vf4oCNJv3O2W4jesVPmED4q9K5GTZf82+52ZhWmGYj81Upx
GUUt7xoACTK3zywChrco2csCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285332322596762712060382331149475008064548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 22:51:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 22:50:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwflugboerse.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788482528761759957304321106370970116520767718084333003062826612413077162961742279443625061624356636245002509321007783927508326105776162431939584138267466469868067296582643498334923225052015177256847066148535057124154611094988701533885449390968112683409367213173204118854438800084671249314583458275522478663292474036331908094731295769306077236207653806690346850542762897078742394054843609089467286547356907166539898220802866447807221666840964510496593274486223100022549027021338809568008932736189696306224643724130985530503309864399041101692802760709365809977250426025434080790225616597443986314442916888857129815709631235122290906626056020612292026320611645608177118662193070015750482963015314362363006493867070609341944070117450312276214906388216254042185460439234919411521021484108002375350360528511154888347600833788387645378838599292022437431052718483530608315041349342859338646034343233117612264503748907587097276515181351440459320311357435056471662650613739494856583461643478486722730852778219680087980863165445221655050297435368888810238573804727426997426436651209584405327992153866495113831657883697653315491105351720622741236992022571324401175380492114328915111378522017615694153440341036193997118756849471669906453633227211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f564c9305e86fbaba0cfd38c5143f24d9e28cc64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1796 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a8g.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addictinggames.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anadolufm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbctalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benita.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodybrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boxebrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butorokmagyar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canale.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chemicalenergy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudstart.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.counting.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dalailama.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demarchepermis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doba.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floreskulleather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freerider.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaydadandson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googodeals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairdryer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hodura.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holds.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homesecuritysystems.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keepa.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lqj.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miraclelounge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nge.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuclearelectricity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.octavian.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacsun.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postcards.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rippling.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunnybankrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superbike.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierheimkassel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traintimes.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upcomingmovies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacantland.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaginalsonde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vender.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdfbnet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfinanztest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwflugboerse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwthestreameast.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brsenplanspiel-vpb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--eibren-dua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--private-krankenversicherung-selbstndige-jkd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--riesenschildkrten-d0b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a8g.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addictinggames.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anadolufm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbctalent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benita.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodybrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxebrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butorokmagyar.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canale.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemicalenergy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudstart.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counting.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalailama.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demarchepermis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doba.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floreskulleather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freerider.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaydadandson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googodeals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairdryer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hodura.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holds.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesecuritysystems.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepa.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lqj.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraclelounge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nge.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuclearelectricity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octavian.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacsun.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postcards.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rippling.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnybankrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbike.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierheimkassel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traintimes.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upcomingmovies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacantland.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaginalsonde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vender.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdfbnet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfinanztest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwflugboerse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwthestreameast.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brsenplanspiel-vpb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--eibren-dua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--private-krankenversicherung-selbstndige-jkd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--riesenschildkrten-d0b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvp.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e9c12c764000004030047304502205994350982e8bae53f5c14e1f6f564e06c6b89a7b97f2a02212e8ba50a493cf3022100da83efa9a75b4150c1da0bef9c4a82e5d135d94ac372d92dc965e1f9dd68012e0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e9c12c771000004030046304402201ac5fe3171c6ff76f36337c011b0a52b182ecb5b9450c7b66b35b31c3031e5ec02204aecae006bf2d53ef930601979b68546d199c71e1f96e792f6c02a0d464883ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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