friendsoffred.us

Issued by R3

About this certificate

This digital certificate with serial number 03:0a:85:91:e0:21:6f:e4:2e:48:db:80:fc:49:26:41:c4:85 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=friendsoffred.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:85:91:e0:21:6f:e4:2e:48:db:80:fc:49:26:41:c4:85
Serial Number (int): 264917226216882915206302568090345410774149
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:70:96:56:41:40:27:f9:ea:04:38:d2:7a:da:70:17:e3:b1:07:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:2d:e1:78:e3:b7:9a:fd:bd:3c:a8:a4:c3:a4:e7:3c:59:7e:60:a1
Fingerprint (sha256): 6d:c7:db:71:7f:e2:17:47:77:39:e4:8b:df:87:5e:ea:49:75:f2:f4:5d:4c:62:d0:9d:e6:90:df:80:4a:55:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate friendsoffred.us

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for friendsoffred.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a7n2.com
*.blasenentzuedung.de
*.campingfurniture.com.au
*.cirruscrowd.com
*.credipal.com
*.de-schwangerschaft.de
*.delbar.life
*.direitofacil.org
*.draughtcard.com
*.ecertonline.com
*.electricoin.com
*.electroformance.com
*.falottery.com
*.fels-quellwasser.de
*.freethrough.com
*.friendsoffred.us
*.ftl.me
*.ftlfoundation.com
*.ftlfoundation.net
*.greatbritishpub.co.uk
*.hausmittel-gegen-hautausschlag.de
*.hoodtuna.top
*.hullmotorauctions.co.uk
*.hyr.com.au
*.latestfashionideas.co.uk
*.leukaemie-de.de
*.lifewayslearning.co.uk
*.littlemisswigs.co.uk
*.m-infraspinatus.de
*.maricanas.com
*.muziekparadijs.biz
*.nierenkoerperchen.de
*.pakistaniporn.net
*.parentbadge.com
*.privategetaways.com
*.propwing.com
*.psychotherapihe.de
*.redpeppersrugeley.co.uk
*.schuessler-salz-4.de
*.showgirl.com.au
*.staendig-schnupfen.de
*.swarmsource.com
*.thegoodscrap.com
*.uhrglasnaegel.de
*.uktplay.co.uk
*.venombot.com
*.www-endokrinologie.de
*.yepschooldirect.co.uk
a7n2.com
blasenentzuedung.de
campingfurniture.com.au
cirruscrowd.com
credipal.com
de-schwangerschaft.de
delbar.life
direitofacil.org
draughtcard.com
ecertonline.com
electricoin.com
electroformance.com
falottery.com
fels-quellwasser.de
freethrough.com
friendsoffred.us
ftl.me
ftlfoundation.com
ftlfoundation.net
greatbritishpub.co.uk
hausmittel-gegen-hautausschlag.de
hoodtuna.top
hullmotorauctions.co.uk
hyr.com.au
latestfashionideas.co.uk
leukaemie-de.de
lifewayslearning.co.uk
littlemisswigs.co.uk
m-infraspinatus.de
maricanas.com
muziekparadijs.biz
nierenkoerperchen.de
pakistaniporn.net
parentbadge.com
privategetaways.com
propwing.com
psychotherapihe.de
redpeppersrugeley.co.uk
schuessler-salz-4.de
showgirl.com.au
staendig-schnupfen.de
swarmsource.com
thegoodscrap.com
uhrglasnaegel.de
uktplay.co.uk
venombot.com
www-endokrinologie.de
yepschooldirect.co.uk

Other certificates including the domain name friendsoffred.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for friendsoffred.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264917226216882915206302568090345410774149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 06:34:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 06:34:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'friendsoffred.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 703915322198546580529206308129340462692760161519551527982446027321900956419989590987809800376462195372364855628019946583451687731803200538662561276082450686409470884991276748966190913400794003106953887876766380191984660495971166117761616593844956041779152961966423377308751964439108897803525270117680293592422310327381934599926025778501126519372978812658372152308465537299976013613505103053314174551395941679819232212206520601818988353127083689521806831734114882422457699004607056103088514853844539294987879078989632447170308611804213338888755239750297552726437554476820370640431268188175286814116645454208720787135067492927051175745805043515330846743690674116010517464456696107556553940619045265425489913659564227388705318965295486511355392146805128100742901039074722506636399155532485688543655410672700803830998702454369362482376467830896318320641156805897939638911239359070707858858417056020291324403982689095390307344402449221166672543744842858241513106783540985127019428014823994003959694932097653258621217745954092806668588582756962228074203001374744402157027217298416244159267174945410641100472585774098389080175243665442149096628368190949860265043575521601455313552750069460653723712215091989550811087806012435010474573331183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f709656414027f9ea0438d27ada7017e3b10792
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1922 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a7n2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blasenentzuedung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campingfurniture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cirruscrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credipal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-schwangerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delbar.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.direitofacil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draughtcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecertonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electricoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electroformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.falottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fels-quellwasser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freethrough.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendsoffred.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftlfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftlfoundation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbritishpub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hausmittel-gegen-hautausschlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoodtuna.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hullmotorauctions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latestfashionideas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leukaemie-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifewayslearning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littlemisswigs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m-infraspinatus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maricanas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muziekparadijs.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nierenkoerperchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistaniporn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parentbadge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privategetaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propwing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychotherapihe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redpeppersrugeley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-salz-4.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staendig-schnupfen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swarmsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegoodscrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhrglasnaegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uktplay.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venombot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-endokrinologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yepschooldirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a7n2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blasenentzuedung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campingfurniture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirruscrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credipal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-schwangerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delbar.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direitofacil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draughtcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecertonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electroformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fels-quellwasser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freethrough.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsoffred.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftlfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftlfoundation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatbritishpub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hausmittel-gegen-hautausschlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodtuna.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hullmotorauctions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latestfashionideas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leukaemie-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifewayslearning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlemisswigs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-infraspinatus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maricanas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muziekparadijs.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nierenkoerperchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistaniporn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentbadge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privategetaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propwing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychotherapihe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redpeppersrugeley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-salz-4.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staendig-schnupfen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarmsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoodscrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrglasnaegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uktplay.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venombot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-endokrinologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yepschooldirect.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bccc0b301000004030047304502204caaa3a544146a03216b8a9cecdc8b5371b50324c94d76cb9b1532c03e3e3db30221009739fbdae302d2a218397448bfb129842a73c8f02fb14bcacbee7a02b65274310076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bccc0b306000004030047304502207989a9b0938f0d0d6219a7a903c7bf2b621cc809c4bb48cb38da0493b126b8fd02210091c4952e412cc99bb0edba6be8b6bb013e88cc4e6fcecaaed97823ade44702ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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