abfrankfurt.com

Issued by R3

About this certificate

This digital certificate with serial number 03:12:b2:4c:a0:8d:4d:09:e5:d9:81:bb:f4:30:f6:90:13:77 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abfrankfurt.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:b2:4c:a0:8d:4d:09:e5:d9:81:bb:f4:30:f6:90:13:77
Serial Number (int): 267698940854049145764790463325111416001399
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:16:33:87:a7:be:99:61:b7:96:5e:50:06:14:f1:cf:46:fc:75:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:4d:bd:28:d6:9d:fa:41:ce:d5:b0:28:3c:5d:33:bd:e4:88:07:bb
Fingerprint (sha256): 64:6b:6a:0e:89:87:22:bc:6d:c7:b2:02:e1:41:8d:3e:b1:27:a5:59:d6:d5:a0:a8:60:98:e7:a0:48:89:58:29

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abfrankfurt.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abfrankfurt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abfrankfurt.com
berlinairports.com
berlinbuildings.com
berlincampus.com
berlinclass.com
berlinmusicacademy.com
berlinpilot.com
bitcoinegypt.net
bitcoinsuez.com
bitcoinwalletcash.net
bookfairfrankfurt.com
boston4g.com
chineseoilcompany.com
creditdefault.net
dagenhamfilmstudios.com
directtomarketing.com
energygovernment.com
fairfrankfurt.com
financialcountry.com
financialgovernment.com
financialparties.com
financialphotos.com
foodconscious.net
frankfurtattractions.com
gmbhfrankfurt.com
helsinkicampus.com
helsinkienergy.com
insulateproperty.com
jesussana.com
microwavewar.net
middleeastterminals.com
monacoauction.net
monacoauctions.net
multiplanetarylife.org
norgebitcoin.net
omahacampus.com
programmingprizes.com
rigdrilling.net
shoppingfrankfurt.com
suissedaily.com
suissepost.com
synonymous.com
tankermanagement.net
tankermanager.net
tartous.com
theaterights.com
theatreright.com
tradefairfrankfurt.com
transparentgifts.com
tropicalislandrealty.com
unscrupulous.com
www.abfrankfurt.com
www.berlinbuildings.com
www.berlincampus.com
www.berlinclass.com
www.berlinmusicacademy.com
www.berlinpilot.com
www.bitcoinegypt.net
www.bitcoinliquide.net
www.bitcoinwalletcash.net
www.bookfairfrankfurt.com
www.boston4g.com
www.capetownmassage.com
www.chineseoilcompany.com
www.corporatepurposes.com
www.dagenhamfilmstudios.com
www.energygovernment.com
www.fairfrankfurt.com
www.financialcountry.com
www.financialgovernment.com
www.financialparties.com
www.financialphotos.com
www.foodconscious.net
www.frankfurtattractions.com
www.gmbhfrankfurt.com
www.helsinkicampus.com
www.helsinkienergy.com
www.microwavewar.net
www.middleeastterminals.com
www.monacoauction.net
www.monacoauctions.net
www.multiplanetarylife.org
www.norgebitcoin.net
www.offshorefiduciaryservices.com
www.omahacampus.com
www.rigdrilling.net
www.shoppingfrankfurt.com
www.suissedaily.com
www.suissepost.com
www.synonymous.com
www.tankermanagement.net
www.tankermanager.net
www.tartous.com
www.theaterights.com
www.theatreright.com
www.tradefairfrankfurt.com
www.transparentgifts.com
www.tropicalislandrealty.com
www.unscrupulous.com
www.wavetechnologie.net

Other certificates including the domain name abfrankfurt.com

(limited to 100 certificates)
abfrankfurt.com
abfrankfurt.com
www.synonymous.com
www.synonymous.com
www.omahacampus.com
abfrankfurt.com
www.bitcoinwalletcash.net
www.berlinpilot.com

Certificate

The complete raw certificate details for abfrankfurt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINjDCCDHSgAwIBAgISAxKyTKCNTQnl2YG79DD2kBN3MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjcxMDUyMTlaFw0yMzEyMjYxMDUyMThaMBoxGDAWBgNVBAMT
D2FiZnJhbmtmdXJ0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALlQyHgTKMj8i1dr+Wqfuu8so3zaA5iSpCdmlOIM0YH6BY5ZEQCwUfm0a9gJBPDH
Ovvpl0NIhxpiV2+TPoRGkHdCJgQ3Jk2YmScmB3druFKRsOvDqYoPTWpIQaiRTBri
ff/9hvHO7vONTS1OBQa1MStpYd9LaNVW5lzmWFdeeXnMCLYp3pQC2QqnsL6C5G0k
vHPY6iDm6IOd7R46h2F5G4nnASpYn9siqfbqcOQz9kWohrqIDpriVWHjWvUlHmY/
94sKsVKkzXlD2mIHp0H9OqtKu0nJYcIwYehdPWmVzR/6E7K1hqbpW4HjQPMhRB3E
8sjkX+kVgqAsdmM/BqGrmwMCAwEAAaOCCrIwggquMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUShYzh6e+mWG3ll5QBhTxz0b8dQswHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggi6BgNVHREEggixMIIIrYIPYWJmcmFua2Z1cnQuY29tghJiZXJsaW5haXJw
b3J0cy5jb22CE2JlcmxpbmJ1aWxkaW5ncy5jb22CEGJlcmxpbmNhbXB1cy5jb22C
D2JlcmxpbmNsYXNzLmNvbYIWYmVybGlubXVzaWNhY2FkZW15LmNvbYIPYmVybGlu
cGlsb3QuY29tghBiaXRjb2luZWd5cHQubmV0gg9iaXRjb2luc3Vlei5jb22CFWJp
dGNvaW53YWxsZXRjYXNoLm5ldIIVYm9va2ZhaXJmcmFua2Z1cnQuY29tggxib3N0
b240Zy5jb22CFWNoaW5lc2VvaWxjb21wYW55LmNvbYIRY3JlZGl0ZGVmYXVsdC5u
ZXSCF2RhZ2VuaGFtZmlsbXN0dWRpb3MuY29tghVkaXJlY3R0b21hcmtldGluZy5j
b22CFGVuZXJneWdvdmVybm1lbnQuY29tghFmYWlyZnJhbmtmdXJ0LmNvbYIUZmlu
YW5jaWFsY291bnRyeS5jb22CF2ZpbmFuY2lhbGdvdmVybm1lbnQuY29tghRmaW5h
bmNpYWxwYXJ0aWVzLmNvbYITZmluYW5jaWFscGhvdG9zLmNvbYIRZm9vZGNvbnNj
aW91cy5uZXSCGGZyYW5rZnVydGF0dHJhY3Rpb25zLmNvbYIRZ21iaGZyYW5rZnVy
dC5jb22CEmhlbHNpbmtpY2FtcHVzLmNvbYISaGVsc2lua2llbmVyZ3kuY29tghRp
bnN1bGF0ZXByb3BlcnR5LmNvbYINamVzdXNzYW5hLmNvbYIQbWljcm93YXZld2Fy
Lm5ldIIXbWlkZGxlZWFzdHRlcm1pbmFscy5jb22CEW1vbmFjb2F1Y3Rpb24ubmV0
ghJtb25hY29hdWN0aW9ucy5uZXSCFm11bHRpcGxhbmV0YXJ5bGlmZS5vcmeCEG5v
cmdlYml0Y29pbi5uZXSCD29tYWhhY2FtcHVzLmNvbYIVcHJvZ3JhbW1pbmdwcml6
ZXMuY29tgg9yaWdkcmlsbGluZy5uZXSCFXNob3BwaW5nZnJhbmtmdXJ0LmNvbYIP
c3Vpc3NlZGFpbHkuY29tgg5zdWlzc2Vwb3N0LmNvbYIOc3lub255bW91cy5jb22C
FHRhbmtlcm1hbmFnZW1lbnQubmV0ghF0YW5rZXJtYW5hZ2VyLm5ldIILdGFydG91
cy5jb22CEHRoZWF0ZXJpZ2h0cy5jb22CEHRoZWF0cmVyaWdodC5jb22CFnRyYWRl
ZmFpcmZyYW5rZnVydC5jb22CFHRyYW5zcGFyZW50Z2lmdHMuY29tghh0cm9waWNh
bGlzbGFuZHJlYWx0eS5jb22CEHVuc2NydXB1bG91cy5jb22CE3d3dy5hYmZyYW5r
ZnVydC5jb22CF3d3dy5iZXJsaW5idWlsZGluZ3MuY29tghR3d3cuYmVybGluY2Ft
cHVzLmNvbYITd3d3LmJlcmxpbmNsYXNzLmNvbYIad3d3LmJlcmxpbm11c2ljYWNh
ZGVteS5jb22CE3d3dy5iZXJsaW5waWxvdC5jb22CFHd3dy5iaXRjb2luZWd5cHQu
bmV0ghZ3d3cuYml0Y29pbmxpcXVpZGUubmV0ghl3d3cuYml0Y29pbndhbGxldGNh
c2gubmV0ghl3d3cuYm9va2ZhaXJmcmFua2Z1cnQuY29tghB3d3cuYm9zdG9uNGcu
Y29tghd3d3cuY2FwZXRvd25tYXNzYWdlLmNvbYIZd3d3LmNoaW5lc2VvaWxjb21w
YW55LmNvbYIZd3d3LmNvcnBvcmF0ZXB1cnBvc2VzLmNvbYIbd3d3LmRhZ2VuaGFt
ZmlsbXN0dWRpb3MuY29tghh3d3cuZW5lcmd5Z292ZXJubWVudC5jb22CFXd3dy5m
YWlyZnJhbmtmdXJ0LmNvbYIYd3d3LmZpbmFuY2lhbGNvdW50cnkuY29tght3d3cu
ZmluYW5jaWFsZ292ZXJubWVudC5jb22CGHd3dy5maW5hbmNpYWxwYXJ0aWVzLmNv
bYIXd3d3LmZpbmFuY2lhbHBob3Rvcy5jb22CFXd3dy5mb29kY29uc2Npb3VzLm5l
dIIcd3d3LmZyYW5rZnVydGF0dHJhY3Rpb25zLmNvbYIVd3d3LmdtYmhmcmFua2Z1
cnQuY29tghZ3d3cuaGVsc2lua2ljYW1wdXMuY29tghZ3d3cuaGVsc2lua2llbmVy
Z3kuY29tghR3d3cubWljcm93YXZld2FyLm5ldIIbd3d3Lm1pZGRsZWVhc3R0ZXJt
aW5hbHMuY29tghV3d3cubW9uYWNvYXVjdGlvbi5uZXSCFnd3dy5tb25hY29hdWN0
aW9ucy5uZXSCGnd3dy5tdWx0aXBsYW5ldGFyeWxpZmUub3JnghR3d3cubm9yZ2Vi
aXRjb2luLm5ldIIhd3d3Lm9mZnNob3JlZmlkdWNpYXJ5c2VydmljZXMuY29tghN3
d3cub21haGFjYW1wdXMuY29tghN3d3cucmlnZHJpbGxpbmcubmV0ghl3d3cuc2hv
cHBpbmdmcmFua2Z1cnQuY29tghN3d3cuc3Vpc3NlZGFpbHkuY29tghJ3d3cuc3Vp
c3NlcG9zdC5jb22CEnd3dy5zeW5vbnltb3VzLmNvbYIYd3d3LnRhbmtlcm1hbmFn
ZW1lbnQubmV0ghV3d3cudGFua2VybWFuYWdlci5uZXSCD3d3dy50YXJ0b3VzLmNv
bYIUd3d3LnRoZWF0ZXJpZ2h0cy5jb22CFHd3dy50aGVhdHJlcmlnaHQuY29tghp3
d3cudHJhZGVmYWlyZnJhbmtmdXJ0LmNvbYIYd3d3LnRyYW5zcGFyZW50Z2lmdHMu
Y29tghx3d3cudHJvcGljYWxpc2xhbmRyZWFsdHkuY29tghR3d3cudW5zY3J1cHVs
b3VzLmNvbYIXd3d3LndhdmV0ZWNobm9sb2dpZS5uZXQwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB6MoxU2LcttiDqOOBSHumE
FnAyE4VNO9IrwTpXo1LrUgAAAYrWe5v4AAAEAwBHMEUCIA7Qw9pqcZYh1AtiDp1Y
05i0mPsVpa5CBeJlND1BT69mAiEA2lqSvjp7BOhASaTpEeZy5X6zOawcaC/e54/2
o7V0sZsAdQCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYrWe52b
AAAEAwBGMEQCIE3Uzm1BWrAgzSU93YG6nRYoihRaicy9oPT/PchqRL9SAiA0gDVW
nE/stSCTVbX3Fk5f1j1R/GNUknMsIdPqPBaypDANBgkqhkiG9w0BAQsFAAOCAQEA
HWICb2WrfqSk71UpnzXcRV7AUyEVi7Dqxz1o87KK3hr/N+7L5KLcTKTqnqLSe6gw
E6WSKyOpyyRi6sZuPtQNCWAHRb4wv6E0OX6CNz5Eu/vVHnzq+nTVjGcvs1hDRJpi
RowyGQc+qfTpYTaZRU55NvrVzaUEnSO0jElfupe0Wi4PmJSDZ3D110pl3X1bJ9Ue
oGs69DKBEu4iRB/ctWGRPvoT03sKrpjargP6lsJ/JdOn8JMFxKi4IM7aipFw94UI
YB5fR14fAFdTDpFkM07Qcl986nU0+p5QwtQ6wp0pdN6zRv5EdFOOQGKbWUmoyOgD
s8bzO6gszI7DnmWQmHCInQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVDIeBMoyPyLV2v5ap+6
7yyjfNoDmJKkJ2aU4gzRgfoFjlkRALBR+bRr2AkE8Mc6++mXQ0iHGmJXb5M+hEaQ
d0ImBDcmTZiZJyYHd2u4UpGw68Opig9NakhBqJFMGuJ9//2G8c7u841NLU4FBrUx
K2lh30to1VbmXOZYV155ecwItinelALZCqewvoLkbSS8c9jqIObog53tHjqHYXkb
iecBKlif2yKp9upw5DP2RaiGuogOmuJVYeNa9SUeZj/3iwqxUqTNeUPaYgenQf06
q0q7SclhwjBh6F09aZXNH/oTsrWGpulbgeNA8yFEHcTyyORf6RWCoCx2Yz8Goaub
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267698940854049145764790463325111416001399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 10:52:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 10:52:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abfrankfurt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23393922041246007745094040604138490997925673121519468920701632149336397020908765856273303266572662032445839221101646819586111242322587200637283238505983443207989167272479066362478011010735570791795005782130554830541013650580069320757683885208329327674247055111376330013368506851884149693795114160177058071957094152000304225770964385298349804845362766224043459006671141621615761405473247564551226530950280646905966253506739028127977555253502144293750038429681478838052877095179858111760913900110950943355362234907948784007309101658032916488394067559933104202088861960404071617388250659995902860364201763656904527813379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a163387a7be9961b7965e500614f1cf46fc750b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinairports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinbuildings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlincampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinmusicacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinpilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinegypt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinsuez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinwalletcash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookfairfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston4g.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chineseoilcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditdefault.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dagenhamfilmstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directtomarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energygovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialparties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodconscious.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfurtattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmbhfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkicampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkienergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insulateproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesussana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microwavewar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleeastterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monacoauction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monacoauctions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiplanetarylife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norgebitcoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omahacampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programmingprizes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigdrilling.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppingfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suissedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suissepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synonymous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankermanagement.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankermanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tartous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theaterights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theatreright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradefairfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transparentgifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropicalislandrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unscrupulous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinbuildings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlincampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinmusicacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinpilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinegypt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinliquide.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinwalletcash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookfairfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boston4g.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetownmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chineseoilcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatepurposes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dagenhamfilmstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energygovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialparties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodconscious.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankfurtattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmbhfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkicampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkienergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microwavewar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.middleeastterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monacoauction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monacoauctions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multiplanetarylife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norgebitcoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorefiduciaryservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omahacampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rigdrilling.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoppingfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suissedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suissepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synonymous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tankermanagement.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tankermanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tartous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theaterights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theatreright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradefairfrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transparentgifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tropicalislandrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unscrupulous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavetechnologie.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad67b9bf8000004030047304502200ed0c3da6a719621d40b620e9d58d398b498fb15a5ae4205e265343d414faf66022100da5a92be3a7b04e84049a4e911e672e57eb339ac1c682fdee78ff6a3b574b19b007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ad67b9d9b000004030046304402204dd4ce6d415ab020cd253ddd81ba9d16288a145a89ccbda0f4ff3dc86a44bf520220348035569c4fecb5209355b5f7164e5fd63d51fc635492732c21d3ea3c16b2a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d62026f65ab7ea4a4ef55299f35dc455ec05321158bb0eac73d68f3b28ade1aff37eecbe4a2dc4ca4ea9ea2d27ba83013a5922b23a9cb2462eac66e3ed40d09600745be30bfa134397e82373e44bbfbd51e7ceafa74d58c672fb35843449a62468c3219073ea9f4e9613699454e7936fad5cda5049d23b48c495fba97b45a2e0f9894836770f5d74a65dd7d5b27d51ea06b3af4328112ee22441fdcb561913efa13d37b0aae98daae03fa96c27f25d3a7f09305c4a8b820ceda8a9170f78508601e5f475e1f0057530e9164334ed0725f7cea7534fa9e50c2d43ac29d2974deb346fe4474538e40629b5949a8c8e803b3c6f33ba82ccc8ec39e65909870889d