*.exchange1972.de

Issued by R3

About this certificate

This digital certificate with serial number 04:a8:d8:e4:48:98:4b:81:68:ba:8f:2d:5d:28:2c:21:c4:7e was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.exchange1972.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:d8:e4:48:98:4b:81:68:ba:8f:2d:5d:28:2c:21:c4:7e
Serial Number (int): 405904879932931476204412365963491568370814
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:3b:f6:9b:67:5d:ae:d7:9a:d7:29:48:03:c5:96:ae:00:be:66:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:f4:da:7a:50:bb:6d:2f:63:dc:27:20:89:89:3d:7c:c1:f4:0f:c6
Fingerprint (sha256): 6a:0c:b4:99:93:d6:2e:97:b1:f0:76:fa:c8:2a:8e:c0:9b:12:09:01:ea:63:c3:64:9c:50:9a:6e:6c:1e:f9:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.exchange1972.de

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.exchange1972.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.64.lu
*.brixn.at
*.exchange1972.de
*.fest-wasentegernbach.de
*.jazufrieden.de
*.jelkie.de
*.julien-lueer.de
*.lok-weyhe.de
*.neckarsulmer-salonorchester.de
*.schmeissmichnichtweg.de
*.tirzapelzer.com
*.wcpapier.at
*.wohnbau-amend.de
*.xn--frfrieden-q9a.de
*.xn--julien-ler-heb.de
0yvji2a3.antifax.com
64.lu
add.nikokranz.de
app.gaestehaus-kicker.at
brixn.at
browser.okan.at
ca.enjoi-sailing.com
creativ-klick.de
dach.tutorialecke.org
exchange1972.de
fest-wasentegernbach.de
fotokurs-creativ.de
help.icekey.de
helpdesk.enjoi-sailing.com
jazufrieden.de
jelkie.de
julien-lueer.de
lok-weyhe.de
mp.lookpool.de
mx1.panolook.com
neckarsulmer-salonorchester.de
old.woeschka.com
openpgp.kalkschmidt.com
schmeissmichnichtweg.de
sslvpn.woeschka.com
tirzapelzer.com
wcpapier.at
wohnbau-amend.de
wordpress.pma.mazza.cloud
www.astral-anarchie.de
www.creativ-klick.de
www.faq.beaze.de
www.www.arche-naturwaren.de
xn--frfrieden-q9a.de
xn--julien-ler-heb.de

Other certificates including the domain name exchange1972.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.exchange1972.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH+TCCBuGgAwIBAgISBKjY5EiYS4Fouo8tXSgsIcR+MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMTYxOTU5NTVaFw0yNDA1MTYxOTU5NTRaMBwxGjAYBgNVBAMM
ESouZXhjaGFuZ2UxOTcyLmRlMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEorr6
FiYsim+QD0lOaMptB0Px3Yp3SKZQSg9EqDj2k5nXeCfFKaN7wVC+bnkyuHnqlHvV
+jC0X0jexYKKVyL/AaOCBegwggXkMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUtzv2
m2ddrtea1ylIA8WWrgC+ZmwwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU
wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j
ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggPuBgNV
HREEggPlMIID4YIHKi42NC5sdYIKKi5icml4bi5hdIIRKi5leGNoYW5nZTE5NzIu
ZGWCGSouZmVzdC13YXNlbnRlZ2VybmJhY2guZGWCECouamF6dWZyaWVkZW4uZGWC
CyouamVsa2llLmRlghEqLmp1bGllbi1sdWVlci5kZYIOKi5sb2std2V5aGUuZGWC
ICoubmVja2Fyc3VsbWVyLXNhbG9ub3JjaGVzdGVyLmRlghkqLnNjaG1laXNzbWlj
aG5pY2h0d2VnLmRlghEqLnRpcnphcGVsemVyLmNvbYINKi53Y3BhcGllci5hdIIS
Ki53b2huYmF1LWFtZW5kLmRlghYqLnhuLS1mcmZyaWVkZW4tcTlhLmRlghcqLnhu
LS1qdWxpZW4tbGVyLWhlYi5kZYIUMHl2amkyYTMuYW50aWZheC5jb22CBTY0Lmx1
ghBhZGQubmlrb2tyYW56LmRlghhhcHAuZ2Flc3RlaGF1cy1raWNrZXIuYXSCCGJy
aXhuLmF0gg9icm93c2VyLm9rYW4uYXSCFGNhLmVuam9pLXNhaWxpbmcuY29tghBj
cmVhdGl2LWtsaWNrLmRlghVkYWNoLnR1dG9yaWFsZWNrZS5vcmeCD2V4Y2hhbmdl
MTk3Mi5kZYIXZmVzdC13YXNlbnRlZ2VybmJhY2guZGWCE2ZvdG9rdXJzLWNyZWF0
aXYuZGWCDmhlbHAuaWNla2V5LmRlghpoZWxwZGVzay5lbmpvaS1zYWlsaW5nLmNv
bYIOamF6dWZyaWVkZW4uZGWCCWplbGtpZS5kZYIPanVsaWVuLWx1ZWVyLmRlggxs
b2std2V5aGUuZGWCDm1wLmxvb2twb29sLmRlghBteDEucGFub2xvb2suY29tgh5u
ZWNrYXJzdWxtZXItc2Fsb25vcmNoZXN0ZXIuZGWCEG9sZC53b2VzY2hrYS5jb22C
F29wZW5wZ3Aua2Fsa3NjaG1pZHQuY29tghdzY2htZWlzc21pY2huaWNodHdlZy5k
ZYITc3NsdnBuLndvZXNjaGthLmNvbYIPdGlyemFwZWx6ZXIuY29tggt3Y3BhcGll
ci5hdIIQd29obmJhdS1hbWVuZC5kZYIZd29yZHByZXNzLnBtYS5tYXp6YS5jbG91
ZIIWd3d3LmFzdHJhbC1hbmFyY2hpZS5kZYIUd3d3LmNyZWF0aXYta2xpY2suZGWC
EHd3dy5mYXEuYmVhemUuZGWCG3d3dy53d3cuYXJjaGUtbmF0dXJ3YXJlbi5kZYIU
eG4tLWZyZnJpZWRlbi1xOWEuZGWCFXhuLS1qdWxpZW4tbGVyLWhlYi5kZTATBgNV
HSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ADtTd3U+
LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjbO3+vQAAAQDAEcwRQIhAI2r
ZM8uq0YRw0eu4Mypxv8nbAu8BYr3lKCPEKX+l7IOAiBK0qqy3B4vLKDyVIev8HXw
Eapa2UTvQglO7mPpaxd/uAB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdM
Wjp0AAABjbO3+2sAAAQDAEgwRgIhAIfnQuXjNPDt1d5Ma/4yAuxlcPQ7tMk6Gp2p
pKarCmJgAiEA/0ezBs85ienGTcPekTG7qwz0CYRYqeS1f9tiviVsSqowDQYJKoZI
hvcNAQELBQADggEBACHyVqXw5NDSaej8UFhvmIFv9RoHuer4iloSNSvD7s/1cLQP
JvNg8qCCcBVqPVOo0hHMRUKrKNS1Y7tH1BvR1+7wLpl5aI3tskwOFl0tSunuTa4D
e/EoTuK0kVlqthdjq/kt62dp/b40HHZJvi7/+yxwOd/OaA1O5rJa0wUeNNT6an6a
JffDvSuYhcIKIzehvl/OEjyQcEj+RfAizD6PHzXEzwBrwpH/SCqJKPEQZcj5aDW1
jQM0iAjy0I2aHubS6wJl98mFlKNgsaZskO4Peeh4PuCVSdXsyzSX/9LTHcPcVtrX
xHsJjTNsTf/UgjtIkDOdhZODTeE+TtWvrZKk6ss=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEorr6FiYsim+QD0lOaMptB0Px3Yp3
SKZQSg9EqDj2k5nXeCfFKaN7wVC+bnkyuHnqlHvV+jC0X0jexYKKVyL/AQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405904879932931476204412365963491568370814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 19:59:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 19:59:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.exchange1972.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a2bafa16262c8a6f900f494e68ca6d0743f1dd8a7748a6504a0f44a838f69399d77827c529a37bc150be6e7932b879ea947bd5fa30b45f48dec5828a5722ff01
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b73bf69b675daed79ad7294803c596ae00be666c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (997 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.64.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brixn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exchange1972.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fest-wasentegernbach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jazufrieden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jelkie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.julien-lueer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lok-weyhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neckarsulmer-salonorchester.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schmeissmichnichtweg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tirzapelzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcpapier.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wohnbau-amend.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frfrieden-q9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--julien-ler-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0yvji2a3.antifax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '64.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'add.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gaestehaus-kicker.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brixn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'browser.okan.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativ-klick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dach.tutorialecke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange1972.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fest-wasentegernbach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotokurs-creativ.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.icekey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazufrieden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jelkie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julien-lueer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lok-weyhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp.lookpool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.panolook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neckarsulmer-salonorchester.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.woeschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openpgp.kalkschmidt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmeissmichnichtweg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslvpn.woeschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tirzapelzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcpapier.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnbau-amend.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpress.pma.mazza.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astral-anarchie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creativ-klick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faq.beaze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www.arche-naturwaren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frfrieden-q9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--julien-ler-heb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db3b7faf400000403004730450221008dab64cf2eab4611c347aee0cca9c6ff276c0bbc058af794a08f10a5fe97b20e02204ad2aab2dc1e2f2ca0f25487aff075f011aa5ad944ef42094eee63e96b177fb800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db3b7fb6b000004030048304602210087e742e5e334f0edd5de4c6bfe3202ec6570f43bb4c93a1a9da9a4a6ab0a6260022100ff47b306cf3989e9c64dc3de9131bbab0cf4098458a9e4b57fdb62be256c4aaa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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